last executing test programs: 34m2.702183725s ago: executing program 32 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cc, 0x300) ioctl$TUNSETLINK(r0, 0x400454cd, 0x110) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000000)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x200}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x3a, "4372071e845c1497c855383000000002000000372a72ee4dfeed37968b00905020000055965737d2aaec032b9753384b00000000ef86ed689a89"}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x5, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/73, 0x18}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) socket$inet_udp(0x2, 0x2, 0x0) 33m59.95188299s ago: executing program 33 (id=283): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@barrier}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 32m10.702273531s ago: executing program 34 (id=466): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$usbfs(0x0, 0x4000002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 30m43.430798562s ago: executing program 35 (id=574): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000000086000400f78d44679cd1eda13774975946b34000016ea37161b1d363d3c303af1db12d7b63f2983cf2cce9520212df7c33a16d50e0f7534d31c9d9150f3e4acebbbd54e7a11d1e1c286e99ec7a734bb7910b27dbcac3beb59addf2fc1b7132495fc5bdb287a3925264f8c00d5bf231457595f9c77ba4e4b71fa94a3456876561b39f0f8cbbc0361f205ad71eba11e7149bbca9a9a9ddda8e152a6becaf59d2cf"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000010eb78ef200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000274, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYBLOB="c88084090273e6cb7f38ae6ddde8b9e0a964758c33b4af9b516cd0257f8b69b9ce97e3d03119330a85d9164798c79018cf644397da65023a3be837b0197e34fb84c10e8df819dcd2d85b774409ba05c2f1a5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r2, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x500, 0x100, 0x24}, 0x18) open_tree(r4, &(0x7f0000000240)='./file0\x00', 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r8 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r8, 0xffffffffffffffff, 0xfffffffdfffffffc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r10) 28m8.501269185s ago: executing program 36 (id=862): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a02, 0x131) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) fstat(r1, &(0x7f00000007c0)) 27m55.153156146s ago: executing program 37 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r2 = open(0x0, 0x8802, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2110cb3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001980)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) recvmsg$inet_nvme(r2, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) 26m44.625547625s ago: executing program 38 (id=989): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x6fc2, 0x0, {0x6000, 0x1}, {0x50, 0x2}, @ramp={0x570, 0x651d, {0x2, 0x0, 0x9, 0x180}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r3 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0xafbe}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0xc}], 0x2, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x2, 0x1000) 26m25.651062231s ago: executing program 39 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00883a000000000000000000ffff64010100ff0200000000000000000000000000010401927800000001630108f9fffb2b0000000000000000000000fde6d74e0102000000000000000000000000000000013a0a040203080000fc020000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbfe8000000000000000000000000000aafe88000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$xdp(&(0x7f000075a000/0x7000)=nil, 0x7000, 0x9, 0x100010, r3, 0x280000000) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 26m17.897047374s ago: executing program 40 (id=1007): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x1001803, &(0x7f0000000400)={[{@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}], [{@smackfsdef}]}, 0x0, 0x517, &(0x7f0000001180)="$eJzs3V1rZGcdAPD/OZNJs7upmarIWrAttrJbdGeSxrZRpK0gelVQ632MySSETDIhM6mbUDSLH0AQUcEP4I3gBxBkP4IIC3ovKororl7qHpmZkzUvM8mQTDLbye8HJ/M85+3/fw6ZM+fl4ZwArqyXIuKdiChExKsRMZWPT/NhvlXZ68z36OEHi60hiSx77x9JJFFoj9tfVxIRYxFxo7NITETEN78W8Z3keNzGzu7aQq1W3crrleb6ZqWxs3tndX1hpbpS3ZidnXlj7s251+ems9y52lmKiLe+8pef/PAXX33rN5/77h/n/3b7e620vvSJTt4RsXiuAD101l1sb4t9rW20dRHBhqTVnmJh2FkAANCP1jH+RyPi0+3j/6kotI/mAAAAgFGSvT0Z/0kiMgAAAGBkpRExGUlazvsCTEaalsudPrwfj+tprd5ofna5vr2x1JoWUYpiurxaq07nfYVLUUxa9Zm8j+1+/bUj9dmIeC4ifjx1rV0vL9ZrS8O++AEAAABXxI0XD5///3sqbZcBAACAEVPqWQEAAABGhVN+AAAAGH3O/wEAAGCkff3dd1tDtv8e76X3d7bX6u/fWao21srr24vlxfrWZnmlXl9pP7Nv/bT11er1zc/HxvbdSrPaaFYaO7vz6/Xtjeb86qFXYAMAAACX6LkX7/8hiYi9L15rD5E/BxDgkD8POwFgkArDTgAYmrFhJwAMTfHUOewhYNQlp0w/3nmnc60wfnsx+QAAAIN365PH7/+P59NOvzYAfJjp6wMAV4+7e3B1Fc/aA/DmoDMBhuPJPuCZXnP0fHhHH/f/O9cYsuwMiQEAAAM02R6StJwfp09GmpbLEc+2XwtQTJZXa9XpiPhIRPx+qvhMqz7TXjI5tc8wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlkAAAAwEiLSP+atJ/mH3Fr6pXJw1cHjrz16+fv/fTuQrO5NRMxnvxzqjVqPCKaP8vHv5Z5JQAAAAA8BTrn6fnnzLCzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDUPHr4weL+cJlx//7liCh1iz8WE+3PiShGxPV/JTF2YLkkIgoDiL93LyJudoufxOMsy0p5Ft3iX7vg+KX2pukeP42IGwOID1fZ/db+551u3780Xmp/dv/+jeXDefXe/6VP9n+FHvufZ4/Ue3n+wa8qPePfi3h+rPv+Zz9+0ol/KESr8nKfbfz2t3Z3u044sMpu8Q/GqjTXNyuNnd07q+sLK9WV6sbs7Mwbc2/OvT43XVlerVXzv13D/OhTv358Uvuv94hfOtz+Y9v/lb5an8V/H9x9+LFOpdgt/u2Xu//+3uwRP81/+z6Tl1vTb+2X9zrlg1745e9eOKn9Sz3aP3FK+2/31f74wqvf+MGfuk45tjUAgMvQ2NldW6jVqlsnFCb6mOeSC28/HWkMsBBPRxrDKmTf7/w/nm8951z8WCE7z+JjMYA0xo99Twtx1hUmEXutdfX5DwkAAIyY/x/0n3QHCQAAAAAAAAAAAAAAAAAAALhIZ3ws2URE9D3z0Zh7w2kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCJ/hcAAP//Y4bRUQ==") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) 25m25.599829344s ago: executing program 41 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) 23m34.780783901s ago: executing program 42 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') pread64(r2, &(0x7f0000000080)=""/17, 0x11, 0xf0b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xe9) 21m31.641657808s ago: executing program 43 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0xa, 0x2, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000002100)={0x40}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x1014002, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x1, 0x21a, &(0x7f00000007c0)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x14084, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r6, 0x0, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 20m41.595002875s ago: executing program 44 (id=1480): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 20m32.677288695s ago: executing program 45 (id=1484): timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r7}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2d70686488202b63707520c22080b00cdf43eb2f1ef168976cba91635d639bf731c209b2c40f99dbdf0a680177e86ed871145f5fb940b7a36c03ea226ca1d71d89fc6bdd66068a4e40f60b89e9fbcfa63157d32dcec78dffd182ef8e43b24db95b"], 0xb) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 18m41.188632277s ago: executing program 7 (id=1623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffffffffffed4, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000faffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0xf4}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f0000000180)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1882fd6b79d552423", 0x4f}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5373c7bcb029e9a16cfe438f884c62a992b45c4fea81e29d4d07c12b5eb8dec28bdaf8be6103a984d49af61b4fd6907db0d19422e12ef", 0xe8}, {&(0x7f0000000580)="52c41e9b212f9748e6095c684f41173938baacdbc434e55d503f599a70c62e0e975769bbd3b21ad3620168f4aafd724c3495c07479b761fc56b45862431629aa57388af7b632db4c66804869d688673883af26591ff336d9484360d5a121bc613fa32b438b989a", 0x67}], 0x6}, 0x20000004) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x94, 0x0, &(0x7f00000004c0)="de414d5a12b132550785b30d7cceafa1bbded8574e7aec341b2bfe765f953bfff2fd13c7b521878b135d6f97e52ecb0e0e9b43c40ec056e8c5b8ca9bace4716e7b4ec403515bd189c990ae921ae99da63ab59ba88434ec9bbf8e4b0c4cef1e4cad40913573c27146a396a5d88b8daaab6edb0814e1e3a7e67b2e6daae1ccb3d20bf645da74b6a6a2fde93eaf0ee42b01e0130600"}) userfaultfd(0x1) 18m38.575377031s ago: executing program 46 (id=1613): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x88, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)='affs\x00', 0x100018, &(0x7f0000000340)='[\x18+:\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x80, 0x20, 0x2}, 0x18) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0xc61e, 0x0, 0x2}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 18m36.713993053s ago: executing program 47 (id=1615): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a02, 0x131) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000005980), &(0x7f0000000ec0)=0xc) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="240000002e0001002abd"], 0x24}], 0x1}, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 18m35.972029027s ago: executing program 7 (id=1628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 18m35.23356593s ago: executing program 7 (id=1630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000010000000000001ec4990e00000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 18m32.773758282s ago: executing program 7 (id=1633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x141001) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000440)=0x1) 18m31.372810308s ago: executing program 7 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x2, 0x0, 0x0) 18m28.949701622s ago: executing program 7 (id=1637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000240)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-ce\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="87d2", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="3800000002000000010000000000000077ae43faa3d091cd7d18ab106a32ba3a91c42245ce327978cc4fe8ed3eaacfa05b"], 0x38}, 0x4000010) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x2}, 'syz1\x00', 0x4d}) 18m12.583166981s ago: executing program 48 (id=1637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000240)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-ce\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="87d2", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="3800000002000000010000000000000077ae43faa3d091cd7d18ab106a32ba3a91c42245ce327978cc4fe8ed3eaacfa05b"], 0x38}, 0x4000010) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x2}, 'syz1\x00', 0x4d}) 15m33.345631693s ago: executing program 9 (id=1941): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x54, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/92, 0x5c}], 0x1, 0x6c, 0xfffffffeffffffbe}}], 0x48}, 0x0) 15m32.879226382s ago: executing program 9 (id=1944): keyctl$setperm(0x5, 0x0, 0x30925) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 15m32.405781344s ago: executing program 9 (id=1948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) tkill(0x0, 0x39) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) getpgrp(0xffffffffffffffff) 15m31.596459745s ago: executing program 9 (id=1951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000100)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) sendfile(r1, r1, 0x0, 0x7a680000) 15m30.709797598s ago: executing program 9 (id=1958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) io_setup(0x8, &(0x7f00000002c0)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x1000}]) 15m29.922943844s ago: executing program 9 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 15m14.713748581s ago: executing program 49 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 9m3.276258465s ago: executing program 4 (id=3731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='afs_cm_no_server\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x6a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4814}, 0x20040844) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r9}, 0x38) getdents64(r5, 0xffffffffffffffff, 0x43) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x10) fchown(r10, 0x0, 0xee01) r11 = socket(0x10, 0x3, 0x9) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r11, r12, 0x0, 0x7fffffffffffffff) 9m1.517081937s ago: executing program 4 (id=3737): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19f) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9m0.949702935s ago: executing program 4 (id=3739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x48) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0xfd, 0x648, &(0x7f0000002280)="$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") r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f0000002640)) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x1, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x8, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0xffffffff, 0x1, 0x3, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x3, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x4, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x40007, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x9, 0x24c, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x103, 0xa, 0x6, 0x3, 0xf, 0x1, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x104, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r2, @ANYRES64=r2, @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r3, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16], 0x94, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r8, 0x4b67, &(0x7f0000000180)) 8m59.663433781s ago: executing program 4 (id=3746): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 8m58.254482183s ago: executing program 4 (id=3750): socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000240)='./file0\x00', 0x2a4c0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timerfd_create(0x9, 0x80000) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000640)='stack\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, 0x0, 0x0) 8m57.4469644s ago: executing program 4 (id=3753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rename(0x0, 0x0) 8m55.950447307s ago: executing program 50 (id=3753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rename(0x0, 0x0) 2m14.707167175s ago: executing program 0 (id=5198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 2m14.008791036s ago: executing program 0 (id=5202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 2m12.434378242s ago: executing program 0 (id=5207): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000a000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030003000000000000000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000854aee2600000084000000b7000000000000009500000000"], &(0x7f0000000040)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x3a) recvfrom(r3, &(0x7f0000000280)=""/83, 0x53, 0x20, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 2m6.630636612s ago: executing program 0 (id=5218): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f00000002c0)=""/21, 0x15}, 0x401}, {{&(0x7f0000003040)=@qipcrtr, 0x80, &(0x7f0000003340)=[{&(0x7f00000030c0)=""/171, 0xab}, {0x0}, {0x0}, {&(0x7f0000003280)=""/165, 0xa5}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003380)=""/141, 0x8d}, {0x0}, {&(0x7f0000004480)=""/171, 0xab}], 0x3, &(0x7f0000004580)=""/101, 0x65}, 0x5}, {{&(0x7f0000004600)=@pppoe, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004680)=""/194, 0xc2}, {&(0x7f0000004780)=""/131, 0x83}, {&(0x7f0000004840)=""/121, 0x79}, {&(0x7f00000048c0)=""/68, 0x44}, {&(0x7f0000004940)=""/162, 0xa2}, {&(0x7f0000004a00)=""/170, 0xaa}, {&(0x7f0000004ac0)=""/39, 0x27}, {&(0x7f0000004b00)=""/178, 0xb2}], 0x8}, 0x6}, {{&(0x7f0000004c40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004d80)=[{0x0}], 0x1, &(0x7f0000004dc0)=""/54, 0x36}, 0xc9d00000}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004e00)=""/25, 0x19}, {&(0x7f0000004e40)=""/225, 0xe1}, {0x0}], 0x3}, 0x6}, {{&(0x7f0000005080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005580)=[{&(0x7f00000051c0)=""/69, 0x45}, {&(0x7f0000005240)=""/125, 0x7d}, {0x0}, {&(0x7f0000005400)=""/94, 0x5e}], 0x4, &(0x7f0000005600)=""/102, 0x66}, 0x7fff}], 0x7, 0x40000040, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000640)="0cffffdf71c8af", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ftruncate(0xffffffffffffffff, 0x2007ffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaabecc8e043aaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe8000000000000000000000000000007301000000000000c20400000001000100"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="183360962d1e9c7baf969c0c67a509001dfd990000000000006a8908606b6ae9f226e429a0af221a93b482572999fb4916c2d8231d12cbd165aa5f5d5614e930bd9b4d1223f89cb13a1281568b78c5c192cad20cb362a4f17c0538b35dc8a53d53a9addef43928dc2ff6a89d41ccda705482b262cdd754844d31abb1408298232837991d3b0f256409bf12e3342f378ce2b4bff4fc2911a7263d4c34b1bb513a964d2eb64979b4a8bacd63534a3a1223ea39fcf17598bc43e705f5ae7bc98180a8c6"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2003}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e20, @loopback}}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x84c, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000000000000000000000ff0200"/52], 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) 2m4.605694253s ago: executing program 0 (id=5224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 2m3.761592539s ago: executing program 0 (id=5228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1m54.863333427s ago: executing program 8 (id=5250): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r4) 1m53.356037825s ago: executing program 8 (id=5253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x204643, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b9ff03076844048cbabe143d86dd8d0326eb5f439b6187acef0c350e7151d62abd8352eca887e89d739da96340879dfcd473a1017f06", 0x0, 0xb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800002dffa89fa664d0", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) close(r2) 1m52.368994437s ago: executing program 8 (id=5256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) rmdir(0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x0, @initdev}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) 1m50.965469377s ago: executing program 8 (id=5262): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0xc4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x20}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3", 0x2b}], 0x1}, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 1m49.646787285s ago: executing program 8 (id=5268): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r3, &(0x7f0000000380)=ANY=[], 0x20000) 1m48.395843193s ago: executing program 51 (id=5228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1m48.283500084s ago: executing program 8 (id=5272): socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 1m31.519149595s ago: executing program 52 (id=5272): socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 8.354608568s ago: executing program 2 (id=5598): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000480)=@ethtool_stats}) 7.161733806s ago: executing program 2 (id=5605): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000d40)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x8001, 0x6, @loopback, 0x30000}}, {{0xa, 0x4e24, 0x4, @empty, 0x2b304faa}}]}, 0x190) 6.646726491s ago: executing program 2 (id=5609): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020063797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011000100"], 0x64}}, 0x0) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 6.321273238s ago: executing program 1 (id=5611): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x3, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x40a23) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xc, 0x3, 0x9, 0x2, 0x55, "eb293fced92dbac812456ed0cfe43130e63fca", 0xfffffffd, 0x80}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xfffe, 0x80, 0xc, 0xb3, 0x17}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xc5) 6.089645459s ago: executing program 2 (id=5614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) 5.2471749s ago: executing program 2 (id=5616): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='\xd1S{O', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r3) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 5.124728769s ago: executing program 5 (id=5617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) socket$inet6(0xa, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 4.448937454s ago: executing program 3 (id=5618): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 4.319392517s ago: executing program 6 (id=5619): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r0}, 0x38) 4.269463748s ago: executing program 1 (id=5620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r1, 0x0, 0x0) 4.213553803s ago: executing program 2 (id=5621): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.771234808s ago: executing program 3 (id=5622): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000019c0)=[{&(0x7f0000002fc0)=""/140, 0x8c}], 0x1, 0x80000001, 0x100) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3.551063317s ago: executing program 1 (id=5623): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 3.351183859s ago: executing program 5 (id=5624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c000680) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xf7}, 0x18) syz_clone(0x2088c400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.237854712s ago: executing program 6 (id=5625): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 2.905456767s ago: executing program 1 (id=5626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.848470472s ago: executing program 3 (id=5627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2.58170115s ago: executing program 6 (id=5628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c00", 0x6) 2.304705827s ago: executing program 1 (id=5629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 2.299080777s ago: executing program 3 (id=5630): setresuid(0xee00, 0xee01, 0xee01) 2.142922436s ago: executing program 5 (id=5631): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="000202"], 0x18) 1.989936733s ago: executing program 6 (id=5632): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 1.520280613s ago: executing program 3 (id=5633): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.317943931s ago: executing program 5 (id=5634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 1.091078313s ago: executing program 6 (id=5635): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 889.880809ms ago: executing program 5 (id=5636): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)) close_range(r0, 0xffffffffffffffff, 0x0) 676.794219ms ago: executing program 1 (id=5637): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000019c0)=[{&(0x7f0000002fc0)=""/140, 0x8c}], 0x1, 0x80000001, 0x100) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) 309.468975ms ago: executing program 5 (id=5638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xa}}]}}]}, 0x40}}, 0x20040054) 209.65507ms ago: executing program 6 (id=5639): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x10) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6103060218a8f3a2ff0ca57b2b117ac5fef6"], 0x12) 0s ago: executing program 3 (id=5640): syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0xad42) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): z.0.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2212.178691][ T30] audit: type=1326 audit(1755442261.734:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2212.281249][T20905] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2212.329076][T20905] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2212.612223][T18971] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2212.867412][T20919] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4820'. [ 2212.920652][T20921] loop3: detected capacity change from 0 to 512 [ 2212.951981][T20921] EXT4-fs: Ignoring removed bh option [ 2212.980754][T20921] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2213.032231][T20921] EXT4-fs (loop3): 1 truncate cleaned up [ 2213.040528][T20921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2213.347966][T20927] loop0: detected capacity change from 0 to 128 [ 2213.568528][ T30] audit: type=1804 audit(1755442263.194:2468): pid=20927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4821" name="/newroot/288/file0/bus" dev="loop0" ino=1048747 res=1 errno=0 [ 2214.076213][T20933] siw: device registration error -23 [ 2216.243055][ T30] audit: type=1326 audit(1755442264.924:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2216.266138][ T30] audit: type=1326 audit(1755442264.924:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2216.289120][ T30] audit: type=1326 audit(1755442264.934:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2216.314908][ T30] audit: type=1326 audit(1755442264.944:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2216.368645][T20946] loop0: detected capacity change from 0 to 128 [ 2216.406208][T12275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2216.428226][T20946] EXT4-fs: Ignoring removed nobh option [ 2216.531111][T20946] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2216.593695][T20946] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2216.865469][T16623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2217.341833][T20956] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4833'. [ 2218.297886][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2218.297971][ T30] audit: type=1326 audit(1755442267.954:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.327927][ T30] audit: type=1326 audit(1755442267.964:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.350915][ T30] audit: type=1326 audit(1755442267.974:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.373883][ T30] audit: type=1326 audit(1755442267.974:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.399692][ T30] audit: type=1326 audit(1755442267.974:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.423746][ T30] audit: type=1326 audit(1755442267.984:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.446719][ T30] audit: type=1326 audit(1755442267.984:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20970 comm="syz.8.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2218.863594][T20977] loop3: detected capacity change from 0 to 512 [ 2218.925734][T20977] EXT4-fs: Ignoring removed bh option [ 2218.935291][T20977] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2219.034925][T20977] EXT4-fs (loop3): 1 truncate cleaned up [ 2219.043278][T20977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2219.968745][T20995] siw: device registration error -23 [ 2220.011025][T20991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4848'. [ 2220.875855][ T30] audit: type=1326 audit(1755442270.544:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21001 comm="syz.6.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2220.939540][T21004] loop0: detected capacity change from 0 to 128 [ 2221.067272][ T30] audit: type=1326 audit(1755442270.584:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21001 comm="syz.6.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2221.090416][ T30] audit: type=1326 audit(1755442270.594:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21001 comm="syz.6.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2222.319423][T12275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2222.709771][T21018] loop3: detected capacity change from 0 to 128 [ 2222.735301][T21018] EXT4-fs: Ignoring removed nobh option [ 2222.809442][T21018] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2222.835079][T21018] ext4 filesystem being mounted at /590/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2223.167732][T12275] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2223.753193][T21033] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4863'. [ 2223.977726][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2223.977801][ T30] audit: type=1326 audit(1755442273.644:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21037 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2224.007926][ T30] audit: type=1326 audit(1755442273.644:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21037 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2224.038133][ T30] audit: type=1326 audit(1755442273.644:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21037 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2224.063704][ T30] audit: type=1326 audit(1755442273.644:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21037 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2224.087072][ T30] audit: type=1326 audit(1755442273.654:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21037 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2224.109960][ T30] audit: type=1326 audit(1755442273.654:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21037 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2224.481786][T21041] loop3: detected capacity change from 0 to 512 [ 2224.517093][T21041] EXT4-fs: Ignoring removed bh option [ 2224.556146][T21041] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2224.622377][T21041] EXT4-fs (loop3): 1 truncate cleaned up [ 2224.635219][T21041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2224.897061][T21051] loop8: detected capacity change from 0 to 128 [ 2224.928221][T21051] EXT4-fs: Ignoring removed nobh option [ 2225.520165][T21051] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2226.066159][T21060] siw: device registration error -23 [ 2226.467003][T21051] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2227.070551][T18971] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2228.456508][T12275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2228.516381][T21072] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4878'. [ 2228.720937][ T30] audit: type=1326 audit(1755442278.384:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2228.751329][ T30] audit: type=1326 audit(1755442278.384:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2228.776877][ T30] audit: type=1326 audit(1755442278.384:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2228.799903][ T30] audit: type=1326 audit(1755442278.384:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2230.392584][T21092] loop0: detected capacity change from 0 to 128 [ 2230.434060][T21092] EXT4-fs: Ignoring removed nobh option [ 2230.611556][T21092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2230.815481][T21092] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2231.425388][T16623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2232.064844][T21105] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4892'. [ 2232.429672][T21109] siw: device registration error -23 [ 2233.354586][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2233.354665][ T30] audit: type=1326 audit(1755442283.004:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2233.384633][ T30] audit: type=1326 audit(1755442283.024:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2233.407576][ T30] audit: type=1326 audit(1755442283.024:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2234.379716][ T30] audit: type=1326 audit(1755442283.544:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2234.402606][ T30] audit: type=1326 audit(1755442283.544:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2235.150489][T21127] loop0: detected capacity change from 0 to 128 [ 2235.205745][T21127] EXT4-fs: Ignoring removed nobh option [ 2235.231799][T21128] loop3: detected capacity change from 0 to 128 [ 2235.257309][T21127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2235.324072][T21127] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2235.414542][ T30] audit: type=1804 audit(1755442285.074:2505): pid=21128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4900" name="/newroot/596/file0/bus" dev="loop3" ino=1048749 res=1 errno=0 [ 2235.649739][T16623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2236.000905][ T30] audit: type=1326 audit(1755442285.654:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21144 comm="syz.3.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455b8ebe9 code=0x7ffc0000 [ 2236.132599][T21145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4905'. [ 2236.159485][ T30] audit: type=1326 audit(1755442285.694:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21144 comm="syz.3.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe455b8ebe9 code=0x7ffc0000 [ 2236.183606][ T30] audit: type=1326 audit(1755442285.694:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21144 comm="syz.3.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455b8ebe9 code=0x7ffc0000 [ 2236.209024][ T30] audit: type=1326 audit(1755442285.704:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21144 comm="syz.3.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe455b8ebe9 code=0x7ffc0000 [ 2236.341393][T21148] loop8: detected capacity change from 0 to 512 [ 2236.384608][T21148] EXT4-fs: Ignoring removed bh option [ 2236.438127][T21148] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2236.564254][T21148] EXT4-fs (loop8): 1 truncate cleaned up [ 2236.572444][T21148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2237.616033][T21158] siw: device registration error -23 [ 2239.301648][T21171] loop0: detected capacity change from 0 to 128 [ 2239.590691][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2239.590786][ T30] audit: type=1804 audit(1755442289.184:2511): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4918" name="/newroot/313/file0/bus" dev="loop0" ino=1048750 res=1 errno=0 [ 2239.795265][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2240.306658][ T30] audit: type=1326 audit(1755442289.964:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21175 comm="syz.8.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2240.329975][ T30] audit: type=1326 audit(1755442289.974:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21175 comm="syz.8.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2240.353403][ T30] audit: type=1326 audit(1755442289.974:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21175 comm="syz.8.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2240.376415][ T30] audit: type=1326 audit(1755442289.974:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21175 comm="syz.8.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2240.918001][ T30] audit: type=1326 audit(1755442290.074:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21175 comm="syz.8.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2241.198485][T21184] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4924'. [ 2241.466200][T20372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2241.485730][T20372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2241.496147][T20372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2241.523971][T20372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2241.574808][T20372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2241.754489][T21187] lo speed is unknown, defaulting to 1000 [ 2242.509347][T21200] loop8: detected capacity change from 0 to 512 [ 2242.535561][T21200] EXT4-fs: Ignoring removed bh option [ 2242.579841][T21200] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2242.649704][T21200] EXT4-fs (loop8): 1 truncate cleaned up [ 2242.666421][T21200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2242.833002][T21207] loop0: detected capacity change from 0 to 128 [ 2242.879218][T21187] chnl_net:caif_netlink_parms(): no params data found [ 2242.977637][ T30] audit: type=1804 audit(1755442292.624:2517): pid=21207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4931" name="/newroot/316/file0/bus" dev="loop0" ino=1048751 res=1 errno=0 [ 2243.430757][T16511] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.650707][T16511] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.683169][T16628] Bluetooth: hci0: command tx timeout [ 2243.725832][T21214] siw: device registration error -23 [ 2244.139883][ T30] audit: type=1326 audit(1755442293.734:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21213 comm="syz.6.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2244.163948][ T30] audit: type=1326 audit(1755442293.744:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21213 comm="syz.6.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2244.186857][ T30] audit: type=1326 audit(1755442293.744:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21213 comm="syz.6.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2245.238689][T16511] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.963311][T16628] Bluetooth: hci0: command tx timeout [ 2246.220498][T16511] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.265684][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2246.894381][T21228] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4938'. [ 2247.226456][T16511] bridge_slave_1: left allmulticast mode [ 2247.232465][T16511] bridge_slave_1: left promiscuous mode [ 2247.239280][T16511] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.470349][T16511] bridge_slave_0: left allmulticast mode [ 2247.479410][T16511] bridge_slave_0: left promiscuous mode [ 2247.486377][T16511] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.003935][T16628] Bluetooth: hci0: command tx timeout [ 2248.172308][T21239] loop0: detected capacity change from 0 to 128 [ 2248.215815][T21239] EXT4-fs: Ignoring removed nobh option [ 2248.333109][T21239] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2248.439538][T21239] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2248.532228][T21244] loop8: detected capacity change from 0 to 128 [ 2248.735606][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2248.735690][ T30] audit: type=1804 audit(1755442298.394:2523): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4943" name="/newroot/146/file0/bus" dev="loop8" ino=1048752 res=1 errno=0 [ 2248.766994][T21187] bridge0: port 1(bridge_slave_0) entered blocking state [ 2248.774815][T21187] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.782838][T21187] bridge_slave_0: entered allmulticast mode [ 2248.792550][T21187] bridge_slave_0: entered promiscuous mode [ 2248.837550][T16623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2248.863470][T21187] bridge0: port 2(bridge_slave_1) entered blocking state [ 2248.871245][T21187] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.879176][T21187] bridge_slave_1: entered allmulticast mode [ 2248.889685][T21187] bridge_slave_1: entered promiscuous mode [ 2248.963904][T16628] Bluetooth: hci3: command 0x0406 tx timeout [ 2248.968381][T16511] IPVS: stopping backup sync thread 14006 ... [ 2249.264242][ T30] audit: type=1326 audit(1755442298.924:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.6.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2249.281865][T21187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.335680][ T30] audit: type=1326 audit(1755442298.954:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.6.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2249.359846][ T30] audit: type=1326 audit(1755442298.954:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.6.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2249.383865][ T30] audit: type=1326 audit(1755442298.954:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.6.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2249.406811][ T30] audit: type=1326 audit(1755442298.974:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.6.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2249.451959][T21252] loop0: detected capacity change from 0 to 512 [ 2249.484579][T21187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.535669][T21252] EXT4-fs: Ignoring removed bh option [ 2249.563003][T21252] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2249.676234][T21252] EXT4-fs (loop0): 1 truncate cleaned up [ 2249.684511][T21252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2249.959489][T21260] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4950'. [ 2250.551749][T20372] Bluetooth: hci0: command tx timeout [ 2250.804841][T21265] siw: device registration error -23 [ 2253.231784][T21187] team0: Port device team_slave_0 added [ 2253.271158][T16623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2253.466063][T21187] team0: Port device team_slave_1 added [ 2253.576857][T16511] hsr_slave_0: left promiscuous mode [ 2253.588588][T16511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2253.596595][T16511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2253.644135][T16511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2253.651851][T16511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2253.681300][T16511] team0: left allmulticast mode [ 2253.688009][T16511] team_slave_0: left allmulticast mode [ 2253.695769][T16511] team_slave_1: left allmulticast mode [ 2253.702208][T16511] team0: left promiscuous mode [ 2253.710105][T16511] team_slave_0: left promiscuous mode [ 2253.715782][T16511] team_slave_1: left promiscuous mode [ 2253.724862][T16511] dummy0: left allmulticast mode [ 2253.730934][T16511] veth1_macvtap: left promiscuous mode [ 2253.736842][T16511] veth0_macvtap: left promiscuous mode [ 2253.742810][T16511] veth1_vlan: left promiscuous mode [ 2253.748337][T16511] veth0_vlan: left promiscuous mode [ 2254.699152][T21285] loop6: detected capacity change from 0 to 128 [ 2254.860863][ T30] audit: type=1804 audit(1755442304.484:2529): pid=21285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4957" name="/newroot/242/file0/bus" dev="loop6" ino=1048753 res=1 errno=0 [ 2254.925760][ T30] audit: type=1326 audit(1755442304.584:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21286 comm="syz.0.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2254.951745][ T30] audit: type=1326 audit(1755442304.594:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21286 comm="syz.0.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2254.976467][ T30] audit: type=1326 audit(1755442304.594:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21286 comm="syz.0.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2255.088896][ T30] audit: type=1326 audit(1755442304.664:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21286 comm="syz.0.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2255.112164][ T30] audit: type=1326 audit(1755442304.664:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21286 comm="syz.0.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2255.135248][ T30] audit: type=1326 audit(1755442304.674:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21286 comm="syz.0.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2255.427418][T16511] team0 (unregistering): Port device team_slave_1 removed [ 2255.494670][T16511] team0 (unregistering): Port device team_slave_0 removed [ 2256.177259][T21187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.184640][T21187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.211606][T21187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.323224][T21187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.330485][T21187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.357885][T21187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2257.474870][T21304] siw: device registration error -23 [ 2260.081893][T21187] hsr_slave_0: entered promiscuous mode [ 2260.092929][T21187] hsr_slave_1: entered promiscuous mode [ 2260.101733][T21187] debugfs: 'hsr0' already exists in 'hsr' [ 2260.107917][T21187] Cannot create hsr debugfs directory [ 2260.195043][T21310] loop6: detected capacity change from 0 to 128 [ 2260.203825][T21310] EXT4-fs: Ignoring removed nobh option [ 2260.337903][T21310] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2260.453480][T21310] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2260.783574][ T30] audit: type=1326 audit(1755442310.434:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.2.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2260.806775][ T30] audit: type=1326 audit(1755442310.434:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.2.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2260.829804][ T30] audit: type=1326 audit(1755442310.434:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.2.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2260.852787][ T30] audit: type=1326 audit(1755442310.434:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.2.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2260.876075][ T30] audit: type=1326 audit(1755442310.434:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21317 comm="syz.2.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2260.918932][T17819] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2261.374694][T21187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2261.423408][T21187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2261.449503][T21324] loop0: detected capacity change from 0 to 128 [ 2261.548390][T21187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2261.607969][T21327] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4973'. [ 2261.621791][T21187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2261.641541][ T30] audit: type=1804 audit(1755442311.294:2541): pid=21324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4971" name="/newroot/326/file0/bus" dev="loop0" ino=1048754 res=1 errno=0 [ 2262.569676][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2263.088263][T21338] siw: device registration error -23 [ 2264.183635][T21187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2264.459025][T21187] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.608771][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.616611][T16512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.661369][T21347] loop8: detected capacity change from 0 to 128 [ 2264.789689][T21347] EXT4-fs: Ignoring removed nobh option [ 2264.825514][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.833156][T16512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2264.960990][T21347] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2265.120339][T21347] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2265.768506][T18971] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2265.875425][ T30] audit: type=1326 audit(1755442315.524:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.6.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2265.906097][ T30] audit: type=1326 audit(1755442315.524:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.6.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2265.932157][ T30] audit: type=1326 audit(1755442315.534:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.6.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2265.955689][ T30] audit: type=1326 audit(1755442315.534:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.6.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2265.978625][ T30] audit: type=1326 audit(1755442315.534:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.6.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2266.687634][T21366] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4986'. [ 2266.817098][T21368] loop0: detected capacity change from 0 to 128 [ 2266.930639][ T30] audit: type=1804 audit(1755442316.594:2547): pid=21368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4987" name="/newroot/330/file0/bus" dev="loop0" ino=1048755 res=1 errno=0 [ 2268.295100][T21187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2268.335751][T21383] loop6: detected capacity change from 0 to 128 [ 2268.385743][T21383] EXT4-fs: Ignoring removed nobh option [ 2268.531420][T21383] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2268.639787][T21383] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2268.824607][T21391] siw: device registration error -23 [ 2269.269451][T17819] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2269.701720][ T30] audit: type=1326 audit(1755442318.704:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.8.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2269.725191][ T30] audit: type=1326 audit(1755442318.734:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.8.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2269.748062][ T30] audit: type=1326 audit(1755442318.734:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.8.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2269.770995][ T30] audit: type=1326 audit(1755442318.774:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.8.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2270.069399][T21187] veth0_vlan: entered promiscuous mode [ 2270.156084][T21398] loop0: detected capacity change from 0 to 128 [ 2270.291530][T21187] veth1_vlan: entered promiscuous mode [ 2271.004138][T21187] veth0_macvtap: entered promiscuous mode [ 2271.124522][T21187] veth1_macvtap: entered promiscuous mode [ 2271.347636][T21187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2271.379136][T21406] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4999'. [ 2271.418443][T21187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2271.527936][T16511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.637565][T16511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.723073][T16511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2272.016700][T16511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.110645][T21425] loop8: detected capacity change from 0 to 128 [ 2273.185995][T21425] EXT4-fs: Ignoring removed nobh option [ 2273.279621][T21425] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2273.343960][T21425] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2273.913661][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2273.913749][ T30] audit: type=1326 audit(1755442323.534:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2273.943044][ T30] audit: type=1326 audit(1755442323.564:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2273.966575][ T30] audit: type=1326 audit(1755442323.564:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2273.996082][ T30] audit: type=1326 audit(1755442323.564:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2274.021410][ T30] audit: type=1326 audit(1755442323.564:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2274.080147][T18971] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2274.251831][T21440] loop6: detected capacity change from 0 to 512 [ 2274.303711][T21440] EXT4-fs: Ignoring removed bh option [ 2274.341585][T21440] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2274.393271][T21443] loop8: detected capacity change from 0 to 512 [ 2274.440989][T21440] EXT4-fs (loop6): 1 truncate cleaned up [ 2274.449306][T21440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2274.571085][T21443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2274.588183][T21443] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2275.461065][T21457] siw: device registration error -23 [ 2275.877825][T21460] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5013'. [ 2275.930043][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5012'. [ 2275.945681][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 2276.340229][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2277.815328][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2278.695552][ T30] audit: type=1326 audit(1755442328.264:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2278.722521][ T30] audit: type=1326 audit(1755442328.294:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2278.746717][ T30] audit: type=1326 audit(1755442328.294:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2278.769858][ T30] audit: type=1326 audit(1755442328.314:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2278.793913][ T30] audit: type=1326 audit(1755442328.314:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2279.610921][T21492] 9pnet_fd: Insufficient options for proto=fd [ 2280.245261][ T9813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.253410][ T9813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.270205][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5024'. [ 2280.393794][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5024'. [ 2280.424767][T21501] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5025'. [ 2280.573547][T21508] loop6: detected capacity change from 0 to 512 [ 2280.619819][T16516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.628146][T16516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.737331][T21508] EXT4-fs: Ignoring removed bh option [ 2280.827156][T21508] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2280.934404][T21508] EXT4-fs (loop6): 1 truncate cleaned up [ 2280.942419][T21508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2281.970006][T21525] siw: device registration error -23 [ 2282.400059][T21527] program syz.2.5029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2282.568864][ T30] audit: type=1326 audit(1755442332.224:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.3.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2282.783137][ T30] audit: type=1326 audit(1755442332.274:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.3.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2282.809905][ T30] audit: type=1326 audit(1755442332.274:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.3.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2282.835343][ T30] audit: type=1326 audit(1755442332.284:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.3.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2282.858455][ T30] audit: type=1326 audit(1755442332.284:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.3.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2283.253837][T21535] 9pnet_fd: Insufficient options for proto=fd [ 2284.613543][ T30] audit: type=1326 audit(1755442334.274:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2284.731657][T21538] loop0: detected capacity change from 0 to 2048 [ 2284.784428][ T30] audit: type=1326 audit(1755442334.324:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2284.806076][T21540] loop3: detected capacity change from 0 to 512 [ 2284.807944][ T30] audit: type=1326 audit(1755442334.324:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2284.836688][ T30] audit: type=1326 audit(1755442334.334:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2284.863004][ T30] audit: type=1326 audit(1755442334.344:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b0698ec23 code=0x7ffc0000 [ 2284.899747][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2284.940953][T21540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2285.000191][T21538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2285.242604][T21540] EXT4-fs (loop3): 1 truncate cleaned up [ 2285.245417][T21540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2285.726205][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2286.404155][T16623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2286.810372][T21572] loop3: detected capacity change from 0 to 512 [ 2286.841650][T21572] EXT4-fs: Ignoring removed bh option [ 2286.867196][T21572] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2286.957671][T21572] EXT4-fs (loop3): 1 truncate cleaned up [ 2286.966195][T21572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2287.185562][T21571] syzkaller0: entered promiscuous mode [ 2287.191313][T21571] syzkaller0: entered allmulticast mode [ 2287.866102][T21587] siw: device registration error -23 [ 2288.713125][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2288.713207][ T30] audit: type=1326 audit(1755442338.284:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.746041][ T30] audit: type=1326 audit(1755442338.284:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.770569][ T30] audit: type=1326 audit(1755442338.314:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.793884][ T30] audit: type=1326 audit(1755442338.314:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.816866][ T30] audit: type=1326 audit(1755442338.314:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.843421][ T30] audit: type=1326 audit(1755442338.314:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.867987][ T30] audit: type=1326 audit(1755442338.324:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.891039][ T30] audit: type=1326 audit(1755442338.324:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2288.914204][ T30] audit: type=1326 audit(1755442338.324:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21591 comm="syz.8.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2290.315879][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2291.026161][T21615] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5063'. [ 2291.634519][ T30] audit: type=1326 audit(1755442341.284:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.6.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2291.743413][T21623] syzkaller0: entered promiscuous mode [ 2291.749151][T21623] syzkaller0: entered allmulticast mode [ 2292.200231][T21633] loop6: detected capacity change from 0 to 512 [ 2292.247890][T21633] EXT4-fs: Ignoring removed bh option [ 2292.255856][T21633] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2292.396807][T21633] EXT4-fs (loop6): 1 truncate cleaned up [ 2292.405268][T21633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2293.356929][T21642] siw: device registration error -23 [ 2295.535714][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2296.345924][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2296.346012][ T30] audit: type=1326 audit(1755442346.004:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.375463][ T30] audit: type=1326 audit(1755442346.004:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.462889][ T30] audit: type=1326 audit(1755442346.074:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.486175][ T30] audit: type=1326 audit(1755442346.094:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.509139][ T30] audit: type=1326 audit(1755442346.104:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.538978][ T30] audit: type=1326 audit(1755442346.174:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.564407][ T30] audit: type=1326 audit(1755442346.174:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.587537][ T30] audit: type=1326 audit(1755442346.204:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.625901][T21677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5089'. [ 2296.656039][T21677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5089'. [ 2296.659425][ T30] audit: type=1326 audit(1755442346.314:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2296.688946][ T30] audit: type=1326 audit(1755442346.314:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21673 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2297.356440][T21688] loop6: detected capacity change from 0 to 128 [ 2297.376369][T21687] serio: Serial port ptm0 [ 2297.697307][T21691] loop0: detected capacity change from 0 to 512 [ 2297.722109][T21691] EXT4-fs: Ignoring removed bh option [ 2297.738267][T21691] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2298.018445][T21691] EXT4-fs (loop0): 1 truncate cleaned up [ 2298.027598][T21691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2298.783666][T21705] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 2299.060089][T21711] siw: device registration error -23 [ 2300.176873][T21715] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5103'. [ 2300.252581][T21715] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5103'. [ 2301.344635][T16623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2301.798458][T21733] loop8: detected capacity change from 0 to 512 [ 2301.934258][T21733] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2302.123439][T21733] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5110: bg 0: block 248: padding at end of block bitmap is not set [ 2302.173514][T21733] __quota_error: 35 callbacks suppressed [ 2302.173612][T21733] Quota error (device loop8): write_blk: dquota write failed [ 2302.187743][T21733] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2302.198143][T21733] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5110: Failed to acquire dquot type 1 [ 2302.304235][T21733] EXT4-fs (loop8): 1 truncate cleaned up [ 2302.338467][T21733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2302.498989][T21733] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 2302.541555][T21733] EXT4-fs warning (device loop8): read_mmp_block:115: Error -117 while reading MMP block 0 [ 2302.908762][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2303.296981][T21755] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5117'. [ 2303.351663][T21755] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5117'. [ 2304.689472][T21772] siw: device registration error -23 [ 2307.105360][T21797] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5131'. [ 2307.204099][T21797] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5131'. [ 2307.733897][T21806] geneve2: entered allmulticast mode [ 2307.764021][ T9834] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2307.815991][ T9834] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2307.863886][ T9834] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2307.902316][ T9834] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2308.451524][T21817] loop8: detected capacity change from 0 to 164 [ 2308.511170][T21819] loop6: detected capacity change from 0 to 512 [ 2308.554722][T21817] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2308.555558][T21819] journal_path: Non-blockdev passed as './file2' [ 2308.570197][T21819] EXT4-fs: error: could not find journal device path [ 2308.634269][ T30] audit: type=1326 audit(1755442358.304:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.8.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2308.659889][T21817] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2308.705739][T21817] Symlink component flag not implemented [ 2308.711599][T21817] Symlink component flag not implemented [ 2308.718661][T21817] Symlink component flag not implemented (7) [ 2308.724988][T21817] Symlink component flag not implemented (116) [ 2308.746013][T21823] loop0: detected capacity change from 0 to 512 [ 2308.770126][ T30] audit: type=1326 audit(1755442358.324:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.8.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2308.793286][ T30] audit: type=1326 audit(1755442358.324:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.8.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2308.798174][T21823] EXT4-fs: Ignoring removed bh option [ 2308.834648][ T30] audit: type=1326 audit(1755442358.494:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.8.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2308.854709][T21823] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2308.857857][ T30] audit: type=1326 audit(1755442358.494:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.8.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3016585ba7 code=0x7ffc0000 [ 2308.888963][ T30] audit: type=1326 audit(1755442358.504:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.8.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f301652add9 code=0x7ffc0000 [ 2308.971136][T21823] EXT4-fs (loop0): 1 truncate cleaned up [ 2308.979956][T21823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2309.052324][ T30] audit: type=1107 audit(1755442358.714:2664): pid=21818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2309.094894][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5140'. [ 2309.708264][T21834] loop3: detected capacity change from 0 to 512 [ 2309.787199][T21834] EXT4-fs: Ignoring removed bh option [ 2309.820728][T21837] netlink: 'syz.8.5144': attribute type 1 has an invalid length. [ 2309.855865][T21834] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2309.926330][T21834] EXT4-fs (loop3): 1 truncate cleaned up [ 2309.941828][T21834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2310.041340][T21841] siw: device registration error -23 [ 2311.943594][T21846] siw: device registration error -23 [ 2312.366462][T16623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2312.406205][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5146'. [ 2312.615247][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5146'. [ 2314.267968][ T30] audit: type=1326 audit(1755442363.874:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.291424][ T30] audit: type=1326 audit(1755442363.874:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.314369][ T30] audit: type=1326 audit(1755442363.894:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.343997][ T30] audit: type=1326 audit(1755442363.894:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.369400][ T30] audit: type=1326 audit(1755442363.934:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.392334][ T30] audit: type=1326 audit(1755442363.934:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.475286][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2314.498352][ T30] audit: type=1326 audit(1755442364.084:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.522629][ T30] audit: type=1326 audit(1755442364.084:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.549017][ T30] audit: type=1326 audit(1755442364.094:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2314.696118][ T30] audit: type=1326 audit(1755442364.314:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21859 comm="syz.0.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2315.023158][T21867] loop6: detected capacity change from 0 to 512 [ 2315.105770][T21867] EXT4-fs: Ignoring removed orlov option [ 2315.165884][T21875] loop8: detected capacity change from 0 to 512 [ 2315.200880][T21867] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.5155: Attempting to read directory block (0) that is past i_size (256) [ 2315.203875][T21875] EXT4-fs: Ignoring removed bh option [ 2315.270329][T21867] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 2315.281334][T21867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2315.314073][T21875] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2315.398683][T21875] EXT4-fs (loop8): 1 truncate cleaned up [ 2315.408716][T21875] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2315.726269][T21867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2316.356227][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5161'. [ 2316.455861][T21888] siw: device registration error -23 [ 2317.176544][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5161'. [ 2318.425428][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2318.590502][T21900] loop6: detected capacity change from 0 to 512 [ 2318.650799][T21900] EXT4-fs: Ignoring removed bh option [ 2318.672418][T21900] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2318.791523][T21900] EXT4-fs (loop6): 1 truncate cleaned up [ 2318.799912][T21900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2319.827141][T21921] siw: device registration error -23 [ 2320.266339][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5175'. [ 2320.805835][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5175'. [ 2321.879256][T21934] loop8: detected capacity change from 0 to 512 [ 2321.935693][T21934] EXT4-fs: Ignoring removed bh option [ 2322.015787][T21934] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2322.091437][T21934] EXT4-fs (loop8): 1 truncate cleaned up [ 2322.099686][T21934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2322.109626][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2323.069754][T21954] siw: device registration error -23 [ 2323.655033][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2323.655122][ T30] audit: type=1326 audit(1755442373.264:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2323.688164][ T30] audit: type=1326 audit(1755442373.284:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d7818ebe9 code=0x7ffc0000 [ 2323.713364][ T30] audit: type=1326 audit(1755442373.284:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d7818ec23 code=0x7ffc0000 [ 2323.788863][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2323.999597][T21953] loop0: detected capacity change from 0 to 2048 [ 2324.180607][T21953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2324.195140][ T30] audit: type=1326 audit(1755442373.444:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d7818d69f code=0x7ffc0000 [ 2324.218049][ T30] audit: type=1326 audit(1755442373.664:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8d7818ec77 code=0x7ffc0000 [ 2324.240996][ T30] audit: type=1326 audit(1755442373.664:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d7818d550 code=0x7ffc0000 [ 2324.263974][ T30] audit: type=1326 audit(1755442373.664:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d7818e7eb code=0x7ffc0000 [ 2324.291526][ T30] audit: type=1326 audit(1755442373.754:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8d7818d84a code=0x7ffc0000 [ 2324.314691][ T30] audit: type=1326 audit(1755442373.754:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8d7818d84a code=0x7ffc0000 [ 2324.338827][ T30] audit: type=1326 audit(1755442373.754:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d7818d457 code=0x7ffc0000 [ 2324.962172][T21953] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2325.439865][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2325.615167][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5189'. [ 2325.879064][T21975] loop8: detected capacity change from 0 to 512 [ 2325.884795][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5189'. [ 2325.915237][T21975] EXT4-fs: Ignoring removed bh option [ 2325.933585][T21975] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2325.984080][T21975] EXT4-fs (loop8): 1 truncate cleaned up [ 2325.992048][T21975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2326.914113][T21988] siw: device registration error -23 [ 2327.098634][T21987] pimreg: entered allmulticast mode [ 2327.244473][T21987] pimreg: left allmulticast mode [ 2328.418510][T21998] loop3: detected capacity change from 0 to 512 [ 2328.489991][T21998] EXT4-fs: Ignoring removed bh option [ 2328.540538][T21998] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2328.711267][T21998] EXT4-fs (loop3): 1 truncate cleaned up [ 2328.719851][T21998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2329.485123][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2329.485206][ T30] audit: type=1326 audit(1755442379.154:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.611883][ T30] audit: type=1326 audit(1755442379.194:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.635027][ T30] audit: type=1326 audit(1755442379.194:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.657949][ T30] audit: type=1326 audit(1755442379.204:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.681551][ T30] audit: type=1326 audit(1755442379.214:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.708234][ T30] audit: type=1326 audit(1755442379.214:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.732297][ T30] audit: type=1326 audit(1755442379.224:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.755268][ T30] audit: type=1326 audit(1755442379.224:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.778516][ T30] audit: type=1326 audit(1755442379.224:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.804921][ T30] audit: type=1326 audit(1755442379.234:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22008 comm="syz.2.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2329.879804][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2329.986406][T22011] siw: device registration error -23 [ 2332.169035][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2332.375674][T22026] pimreg: entered allmulticast mode [ 2332.454885][T22026] pimreg: left allmulticast mode [ 2332.629429][T22032] loop3: detected capacity change from 0 to 1024 [ 2333.060260][T22035] loop3: detected capacity change from 0 to 512 [ 2333.270928][T22019] loop0: detected capacity change from 0 to 8192 [ 2333.461775][T22029] infiniband syz!: set active [ 2333.467034][T22029] infiniband syz!: added team_slave_0 [ 2333.680498][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5214'. [ 2334.018798][T22035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2334.032307][T22035] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2334.180060][T22029] RDS/IB: syz!: added [ 2334.184561][T22029] smc: adding ib device syz! with port count 1 [ 2334.190891][T22029] smc: ib device syz! port 1 has pnetid [ 2335.364945][T22035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2337.119207][T22047] siw: device registration error -23 [ 2337.242168][T22061] loop8: detected capacity change from 0 to 512 [ 2337.300265][T22061] EXT4-fs: Ignoring removed bh option [ 2337.341744][T22061] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2337.526187][T22061] EXT4-fs (loop8): 1 truncate cleaned up [ 2337.534835][T22061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2338.616045][T22075] siw: device registration error -23 [ 2340.811054][T18971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2344.294854][T22108] 9pnet: Could not find request transport: fd0x0000000000000006 [ 2346.244425][T22125] 8021q: VLANs not supported on vcan0 [ 2346.275708][T22124] loop6: detected capacity change from 0 to 512 [ 2346.329506][T22124] EXT4-fs: Ignoring removed bh option [ 2346.406125][T22124] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2346.444151][T22124] EXT4-fs (loop6): 1 truncate cleaned up [ 2346.451935][T22124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2347.492985][T22146] siw: device registration error -23 [ 2348.609667][T22149] 9pnet: Could not find request transport: fd0x0000000000000006 [ 2349.805438][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2350.046994][ T30] kauditd_printk_skb: 343 callbacks suppressed [ 2350.047082][ T30] audit: type=1326 audit(1755442399.714:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.161747][ T30] audit: type=1326 audit(1755442399.764:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.191505][ T30] audit: type=1326 audit(1755442399.764:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.216968][ T30] audit: type=1326 audit(1755442399.764:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.240141][ T30] audit: type=1326 audit(1755442399.764:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.263436][ T30] audit: type=1326 audit(1755442399.784:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.292597][ T30] audit: type=1326 audit(1755442399.784:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.318402][ T30] audit: type=1326 audit(1755442399.824:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.335620][T22162] 8021q: VLANs not supported on vcan0 [ 2350.342237][ T30] audit: type=1326 audit(1755442399.854:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.369423][ T30] audit: type=1326 audit(1755442399.854:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22159 comm="syz.8.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f301658ebe9 code=0x7ffc0000 [ 2350.654819][T22160] loop8: detected capacity change from 0 to 512 [ 2351.350443][T22172] lo speed is unknown, defaulting to 1000 [ 2351.806841][T22177] 9pnet_fd: Insufficient options for proto=fd [ 2352.959887][T22190] loop3: detected capacity change from 0 to 512 [ 2353.028709][T22190] EXT4-fs: Ignoring removed bh option [ 2353.104468][T22190] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2353.256516][T22190] EXT4-fs (loop3): 1 truncate cleaned up [ 2353.266004][T22190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2353.550229][T22197] 8021q: VLANs not supported on vcan0 [ 2354.156853][T22201] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5273'. [ 2354.170254][T22201] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5273'. [ 2354.773589][T22204] siw: device registration error -23 [ 2356.966571][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2357.030846][T22212] 9pnet_fd: Insufficient options for proto=fd [ 2357.317159][T16628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2357.330095][T16628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2357.353441][T16628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2357.384932][T16628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2357.408495][T16628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2357.509737][T22218] lo speed is unknown, defaulting to 1000 [ 2357.670368][T22214] lo speed is unknown, defaulting to 1000 [ 2357.680081][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2357.680166][ T30] audit: type=1326 audit(1755442407.324:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2357.709552][ T30] audit: type=1326 audit(1755442407.344:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2357.732643][ T30] audit: type=1326 audit(1755442407.344:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2357.762980][ T30] audit: type=1326 audit(1755442407.374:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2357.788714][ T30] audit: type=1326 audit(1755442407.374:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2357.811724][ T30] audit: type=1326 audit(1755442407.404:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2358.343719][ T30] audit: type=1326 audit(1755442407.534:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2358.374855][ T30] audit: type=1326 audit(1755442407.534:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2358.397918][ T30] audit: type=1326 audit(1755442407.554:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2358.420734][ T30] audit: type=1326 audit(1755442407.554:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.3.5277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2359.662255][T16628] Bluetooth: hci2: command tx timeout [ 2360.244547][T22236] 8021q: VLANs not supported on vcan0 [ 2361.606949][T22244] loop6: detected capacity change from 0 to 512 [ 2361.665496][T22244] EXT4-fs: Ignoring removed bh option [ 2361.683700][T20372] Bluetooth: hci2: command tx timeout [ 2361.693125][T22244] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2361.767307][T22249] 9pnet_fd: Insufficient options for proto=fd [ 2361.794880][T22244] EXT4-fs (loop6): 1 truncate cleaned up [ 2361.804543][T22244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2363.353570][T22253] siw: device registration error -23 [ 2363.948243][T22214] chnl_net:caif_netlink_parms(): no params data found [ 2363.970337][T20372] Bluetooth: hci2: command tx timeout [ 2365.592432][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2366.008294][T16628] Bluetooth: hci2: command tx timeout [ 2366.028051][T22214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2366.035777][T22214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2366.049390][T22214] bridge_slave_0: entered allmulticast mode [ 2366.063684][T22214] bridge_slave_0: entered promiscuous mode [ 2366.082361][T22214] bridge0: port 2(bridge_slave_1) entered blocking state [ 2366.092319][T22214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2366.100172][T22214] bridge_slave_1: entered allmulticast mode [ 2366.110022][T22214] bridge_slave_1: entered promiscuous mode [ 2366.479441][T22273] 8021q: VLANs not supported on vcan0 [ 2366.505019][T22214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2366.559318][T22214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2366.725170][T16628] Bluetooth: hci0: command 0x0406 tx timeout [ 2366.892283][T22214] team0: Port device team_slave_0 added [ 2366.920376][T22214] team0: Port device team_slave_1 added [ 2366.949353][T22275] lo speed is unknown, defaulting to 1000 [ 2367.606610][T22282] 9pnet_fd: Insufficient options for proto=fd [ 2368.164618][T22214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2368.171751][T22214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2368.202510][T22214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2369.573986][T22214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2369.581138][T22214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2369.607745][T22214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2370.894704][T22290] loop3: detected capacity change from 0 to 1024 [ 2370.975025][T22290] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2371.035068][T22214] hsr_slave_0: entered promiscuous mode [ 2371.045270][T22214] hsr_slave_1: entered promiscuous mode [ 2371.054287][T22214] debugfs: 'hsr0' already exists in 'hsr' [ 2371.060208][T22214] Cannot create hsr debugfs directory [ 2371.192084][T22290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2371.321927][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.5301: missing EA_INODE flag [ 2371.405232][T22290] EXT4-fs (loop3): Remounting filesystem read-only [ 2371.953583][T16628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2371.964627][T16628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2371.974570][T16628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2371.997428][T16628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2372.009545][T16628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2372.330297][T22300] lo speed is unknown, defaulting to 1000 [ 2372.967047][T22290] lo speed is unknown, defaulting to 1000 [ 2373.032379][T22306] lo speed is unknown, defaulting to 1000 [ 2374.625631][T20372] Bluetooth: hci1: command tx timeout [ 2375.141030][T22313] 8021q: VLANs not supported on vcan0 [ 2376.673254][T16628] Bluetooth: hci1: command tx timeout [ 2377.052213][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2377.130769][T22214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2377.174937][T22214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2377.259277][T22214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2377.342574][T22214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2377.716282][T22328] 9pnet_fd: Insufficient options for proto=fd [ 2378.239653][T22300] chnl_net:caif_netlink_parms(): no params data found [ 2378.723883][T16628] Bluetooth: hci1: command tx timeout [ 2380.058309][T22334] lo speed is unknown, defaulting to 1000 [ 2380.762550][T22214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2380.803800][T20372] Bluetooth: hci1: command tx timeout [ 2380.841991][T22214] 8021q: adding VLAN 0 to HW filter on device team0 [ 2380.883596][T16511] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.891115][T16511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2380.912050][T16511] bridge0: port 2(bridge_slave_1) entered blocking state [ 2380.919672][T16511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2382.107418][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2382.107508][ T30] audit: type=1326 audit(1755442431.754:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.144223][ T30] audit: type=1326 audit(1755442431.784:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.189706][T22348] loop3: detected capacity change from 0 to 128 [ 2382.313559][ T30] audit: type=1326 audit(1755442431.834:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.343425][ T30] audit: type=1326 audit(1755442431.834:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.368896][ T30] audit: type=1326 audit(1755442431.884:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.392026][ T30] audit: type=1326 audit(1755442431.884:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.415290][ T30] audit: type=1326 audit(1755442431.904:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.444493][ T30] audit: type=1326 audit(1755442431.904:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22346 comm="syz.2.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2382.515107][T22300] bridge0: port 1(bridge_slave_0) entered blocking state [ 2382.522770][T22300] bridge0: port 1(bridge_slave_0) entered disabled state [ 2382.536292][T22300] bridge_slave_0: entered allmulticast mode [ 2382.546328][T22300] bridge_slave_0: entered promiscuous mode [ 2382.625398][T22350] syz.3.5313: attempt to access beyond end of device [ 2382.625398][T22350] loop3: rw=2049, sector=257, nr_sectors = 1 limit=128 [ 2382.627974][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.627974][T22348] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 2382.665815][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.665815][T22348] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 2382.681181][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.681181][T22348] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 2382.696564][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.696564][T22348] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 2382.712230][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.712230][T22348] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 2382.729269][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.729269][T22348] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 2382.751458][T22348] syz.3.5313: attempt to access beyond end of device [ 2382.751458][T22348] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 2382.766331][T22352] 8021q: VLANs not supported on vcan0 [ 2382.777234][T22300] bridge0: port 2(bridge_slave_1) entered blocking state [ 2382.784979][T22300] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.793355][T22300] bridge_slave_1: entered allmulticast mode [ 2382.803337][T22300] bridge_slave_1: entered promiscuous mode [ 2382.859167][T22350] syz.3.5313: attempt to access beyond end of device [ 2382.859167][T22350] loop3: rw=524288, sector=257, nr_sectors = 1 limit=128 [ 2382.873497][T22350] syz.3.5313: attempt to access beyond end of device [ 2382.873497][T22350] loop3: rw=0, sector=257, nr_sectors = 1 limit=128 [ 2383.245068][T22300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2383.408124][T22300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2383.539551][T22361] 9pnet_fd: Insufficient options for proto=fd [ 2383.674505][T22300] team0: Port device team_slave_0 added [ 2383.757307][T22300] team0: Port device team_slave_1 added [ 2383.802575][T22214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2383.841232][T22363] loop3: detected capacity change from 0 to 512 [ 2383.913398][T22363] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 2383.939806][T22363] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2383.954475][T22363] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.5319: Block bitmap for bg 0 marked uninitialized [ 2383.996803][T22300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2384.004298][T22300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2384.030113][T22363] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 2384.030667][T22300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2384.057729][T22300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2384.065310][T22300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2384.101892][T22300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2384.120921][T22363] EXT4-fs (loop3): 1 orphan inode deleted [ 2384.129408][T22363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2384.600728][T22214] veth0_vlan: entered promiscuous mode [ 2384.715080][T22214] veth1_vlan: entered promiscuous mode [ 2384.755737][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2384.904138][T22368] lo speed is unknown, defaulting to 1000 [ 2385.157258][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2385.656151][T22372] loop3: detected capacity change from 0 to 1024 [ 2385.673003][T22372] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2385.713296][T22300] hsr_slave_0: entered promiscuous mode [ 2385.723827][T22300] hsr_slave_1: entered promiscuous mode [ 2385.733029][T22300] debugfs: 'hsr0' already exists in 'hsr' [ 2385.739031][T22300] Cannot create hsr debugfs directory [ 2385.961040][T22372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2386.072167][T22214] veth0_macvtap: entered promiscuous mode [ 2386.233569][T22214] veth1_macvtap: entered promiscuous mode [ 2386.384437][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 2386.467602][T22214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2386.561420][T22214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2386.770356][T16407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.895512][T16407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.983377][T16512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.997547][T16407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.285548][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2387.316895][T22384] 8021q: VLANs not supported on vcan0 [ 2388.447255][T22300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2388.539316][T22300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2388.607708][T22300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2388.704435][T22300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2388.814236][T22400] pimreg: entered allmulticast mode [ 2388.821461][T22402] pimreg: left allmulticast mode [ 2388.966574][ T30] audit: type=1326 audit(1755442438.614:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2388.996661][ T30] audit: type=1326 audit(1755442438.614:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.022807][ T30] audit: type=1326 audit(1755442438.614:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.046168][ T30] audit: type=1326 audit(1755442438.614:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.114145][T22405] syz.6.5332 (22405) used obsolete PPPIOCDETACH ioctl [ 2389.375535][ T30] audit: type=1326 audit(1755442438.744:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.405115][ T30] audit: type=1326 audit(1755442438.754:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.430112][ T30] audit: type=1326 audit(1755442438.784:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.453063][ T30] audit: type=1326 audit(1755442438.824:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.476704][ T30] audit: type=1326 audit(1755442438.824:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2389.948815][T22410] lo speed is unknown, defaulting to 1000 [ 2390.029473][T22412] netlink: 'syz.6.5334': attribute type 2 has an invalid length. [ 2390.121077][T22300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2390.359993][T22300] 8021q: adding VLAN 0 to HW filter on device team0 [ 2390.512369][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2390.520028][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2390.741533][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2390.749307][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2390.991547][T22300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2391.004419][T22300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2391.380748][T22422] 8021q: VLANs not supported on vcan0 [ 2393.026757][T22437] loop3: detected capacity change from 0 to 512 [ 2393.055880][T22433] loop6: detected capacity change from 0 to 1024 [ 2393.065994][T22437] EXT4-fs: Ignoring removed bh option [ 2393.103945][T22433] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2393.110651][T22437] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2393.230436][T22433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2393.264614][T22437] EXT4-fs (loop3): 1 truncate cleaned up [ 2393.272471][T22437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2393.793078][T22300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2394.440317][T22449] siw: device registration error -23 [ 2394.656543][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2394.897099][T22452] netlink: 'syz.2.5344': attribute type 2 has an invalid length. [ 2395.151776][T22454] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5343'. [ 2395.212020][T22454] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5343'. [ 2396.785193][T22464] 8021q: VLANs not supported on vcan0 [ 2396.824776][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2397.169155][T22470] @: renamed from vlan0 (while UP) [ 2397.541576][T16511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2397.549856][T16511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2397.880305][T16511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2397.888839][T16511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.066792][T22480] netlink: 'syz.2.5353': attribute type 2 has an invalid length. [ 2398.800652][T22487] lo speed is unknown, defaulting to 1000 [ 2398.952205][T22300] veth0_vlan: entered promiscuous mode [ 2399.355950][T22300] veth1_vlan: entered promiscuous mode [ 2399.488871][T22495] loop1: detected capacity change from 0 to 512 [ 2399.498560][T22495] EXT4-fs: Ignoring removed bh option [ 2399.535984][T22495] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 2399.855587][T22495] EXT4-fs (loop1): 1 truncate cleaned up [ 2399.863736][T22495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2399.887080][T22500] 8021q: VLANs not supported on vcan0 [ 2400.099807][T22300] veth0_macvtap: entered promiscuous mode [ 2400.935441][T22300] veth1_macvtap: entered promiscuous mode [ 2401.060024][T22508] siw: device registration error -23 [ 2401.615132][T22300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2401.814998][ T3506] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2402.184518][ T3506] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2402.462434][T22300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2402.645043][ T3506] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2402.968273][T16512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.158898][ T3506] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.341330][T16512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.348194][T22520] netlink: 'syz.2.5365': attribute type 2 has an invalid length. [ 2403.447511][T16512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.472830][T16512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.473992][T22214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2403.806620][ T3506] bridge_slave_1: left allmulticast mode [ 2403.812520][ T3506] bridge_slave_1: left promiscuous mode [ 2403.819350][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 2403.912414][ T3506] bridge_slave_0: left allmulticast mode [ 2403.918527][ T3506] bridge_slave_0: left promiscuous mode [ 2403.925961][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.941879][T22535] 8021q: VLANs not supported on vcan0 [ 2405.660118][T22545] pimreg: entered allmulticast mode [ 2405.829539][T22545] pimreg: left allmulticast mode [ 2406.353922][ T3506] hsr_slave_0: left promiscuous mode [ 2406.371644][ T3506] hsr_slave_1: left promiscuous mode [ 2406.388260][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2406.407916][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2406.457146][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2406.466715][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2406.525793][ T3506] veth1_macvtap: left promiscuous mode [ 2406.531640][ T3506] veth0_macvtap: left promiscuous mode [ 2406.539094][ T3506] veth1_vlan: left promiscuous mode [ 2406.545147][ T3506] veth0_vlan: left promiscuous mode [ 2406.661003][T22556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 2407.568397][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 2407.661368][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 2408.273872][T22572] 9pnet_fd: Insufficient options for proto=fd [ 2410.124671][T22604] 9pnet_fd: Insufficient options for proto=fd [ 2410.167259][ T30] audit: type=1326 audit(1755442459.814:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2410.198086][ T30] audit: type=1326 audit(1755442459.814:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2410.331501][ T30] audit: type=1326 audit(1755442459.924:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b06990b07 code=0x7ffc0000 [ 2410.354618][ T30] audit: type=1326 audit(1755442459.924:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2410.378009][ T30] audit: type=1326 audit(1755442459.924:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2410.407512][ T30] audit: type=1326 audit(1755442459.934:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2410.432971][ T30] audit: type=1326 audit(1755442459.934:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2411.642013][T22630] loop3: detected capacity change from 0 to 1024 [ 2411.757885][T22630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2411.770969][T22630] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2411.890985][T20717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.899354][T20717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.932875][ T30] audit: type=1800 audit(1755442461.574:3145): pid=22630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5404" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 2411.985228][T22633] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2412.063035][T22635] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.5404: lblock 1 mapped to illegal pblock 1 (length 15) [ 2412.091284][ T30] audit: type=1326 audit(1755442461.754:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22634 comm="syz.6.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2412.114950][ T30] audit: type=1326 audit(1755442461.754:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22634 comm="syz.6.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2412.147897][T22635] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 2412.161588][T22635] EXT4-fs (loop3): This should not happen!! Data will be lost [ 2412.161588][T22635] [ 2412.190529][ T9815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2412.199081][ T9815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2412.692458][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2415.325947][T22672] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2415.325947][T22672] program syz.5.5418 not setting count and/or reply_len properly [ 2416.163124][T22681] loop1: detected capacity change from 0 to 512 [ 2416.195733][T22681] EXT4-fs: Ignoring removed oldalloc option [ 2416.202038][T22681] EXT4-fs: inline encryption not supported [ 2416.213456][T22681] EXT4-fs: Ignoring removed mblk_io_submit option [ 2416.302551][T22681] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2416.511537][T22681] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5421: bg 0: block 64: padding at end of block bitmap is not set [ 2416.561692][T22688] netlink: 'syz.2.5422': attribute type 2 has an invalid length. [ 2416.606659][T22681] __quota_error: 19 callbacks suppressed [ 2416.606755][T22681] Quota error (device loop1): write_blk: dquota write failed [ 2416.620899][T22681] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2416.637090][T22681] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.5421: Failed to acquire dquot type 0 [ 2416.691498][T22681] EXT4-fs (loop1): 1 truncate cleaned up [ 2416.699901][T22681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2416.775588][ T30] audit: type=1326 audit(1755442466.434:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2416.798850][ T30] audit: type=1326 audit(1755442466.444:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2416.821920][ T30] audit: type=1326 audit(1755442466.444:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2416.851776][ T30] audit: type=1326 audit(1755442466.444:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2417.080819][ T30] audit: type=1326 audit(1755442466.544:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2417.104738][ T30] audit: type=1326 audit(1755442466.544:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2417.128486][ T30] audit: type=1326 audit(1755442466.544:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2417.158800][ T30] audit: type=1326 audit(1755442466.554:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22678 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f57f398ebe9 code=0x7ffc0000 [ 2417.287644][T22214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2418.106532][T22716] netlink: 'syz.6.5431': attribute type 10 has an invalid length. [ 2418.138604][T22716] team0: Port device dummy0 added [ 2418.263538][T22716] netlink: 'syz.6.5431': attribute type 10 has an invalid length. [ 2418.348863][T22716] team0: Port device dummy0 removed [ 2418.613881][T22719] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5434'. [ 2418.896940][T22725] netlink: 'syz.6.5435': attribute type 2 has an invalid length. [ 2419.377693][T22733] loop6: detected capacity change from 0 to 128 [ 2419.406732][T22733] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5439'. [ 2420.104357][T22746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5443'. [ 2421.188458][T22766] netlink: 'syz.2.5449': attribute type 2 has an invalid length. [ 2421.804593][T22774] ALSA: seq fatal error: cannot create timer (-22) [ 2422.054202][T22771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2422.069804][T22771] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2422.135585][T22771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2422.142027][T22771] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2422.247512][T22771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2422.259093][T22771] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2422.330290][T22771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2422.337122][T22771] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2422.347966][T22771] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2422.363028][T22771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2422.380163][T22771] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2422.423384][T22771] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2422.633762][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2422.633846][ T30] audit: type=1326 audit(1755442472.284:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.663656][ T30] audit: type=1326 audit(1755442472.284:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.804287][ T30] audit: type=1326 audit(1755442472.374:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.828422][ T30] audit: type=1326 audit(1755442472.374:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.851399][ T30] audit: type=1326 audit(1755442472.414:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.874520][ T30] audit: type=1326 audit(1755442472.414:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.904568][ T30] audit: type=1326 audit(1755442472.434:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2422.930436][ T30] audit: type=1326 audit(1755442472.434:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22785 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0698ebe9 code=0x7ffc0000 [ 2423.112910][ T30] audit: type=1326 audit(1755442472.774:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22792 comm="syz.6.5459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2423.137172][ T30] audit: type=1326 audit(1755442472.774:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22792 comm="syz.6.5459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb137b8ebe9 code=0x7ffc0000 [ 2423.368100][T20372] Bluetooth: hci4: command 0x0406 tx timeout [ 2423.630072][T22804] netlink: 'syz.5.5464': attribute type 2 has an invalid length. [ 2423.766007][T22806] loop1: detected capacity change from 0 to 128 [ 2424.040606][T22806] bio_check_eod: 96 callbacks suppressed [ 2424.040695][T22806] syz.1.5463: attempt to access beyond end of device [ 2424.040695][T22806] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 2424.164184][T20372] Bluetooth: hci3: command 0x0406 tx timeout [ 2424.323471][T20372] Bluetooth: hci0: command 0x0406 tx timeout [ 2424.403099][T20372] Bluetooth: hci1: command 0x0c1a tx timeout [ 2424.409407][T16628] Bluetooth: hci2: command 0x0c1a tx timeout [ 2425.074230][T22824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5470'. [ 2425.445607][T16628] Bluetooth: hci4: command 0x0406 tx timeout [ 2426.243915][T16628] Bluetooth: hci3: command 0x0406 tx timeout [ 2426.352850][T22843] netlink: 'syz.1.5477': attribute type 2 has an invalid length. [ 2426.403401][T16628] Bluetooth: hci0: command 0x0406 tx timeout [ 2426.483131][T16628] Bluetooth: hci2: command 0x0c1a tx timeout [ 2426.489930][T20372] Bluetooth: hci1: command 0x0c1a tx timeout [ 2428.243702][T22872] netlink: 'syz.1.5489': attribute type 2 has an invalid length. [ 2428.563613][T16628] Bluetooth: hci2: command 0x0c1a tx timeout [ 2428.570201][T16628] Bluetooth: hci1: command 0x0c1a tx timeout [ 2429.300533][T22886] vlan0: entered allmulticast mode [ 2431.200473][T22919] loop5: detected capacity change from 0 to 128 [ 2431.436040][T22918] syz.5.5509: attempt to access beyond end of device [ 2431.436040][T22918] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 2432.863482][T22944] loop1: detected capacity change from 0 to 128 [ 2432.961944][T22944] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2433.090136][T22944] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2433.697022][T22214] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2433.786630][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 2433.786717][ T30] audit: type=1326 audit(1755442483.454:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd830b85ba7 code=0x7ffc0000 [ 2433.973157][ T30] audit: type=1326 audit(1755442483.484:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd830b2add9 code=0x7ffc0000 [ 2433.996510][ T30] audit: type=1326 audit(1755442483.494:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd830b85ba7 code=0x7ffc0000 [ 2434.019463][ T30] audit: type=1326 audit(1755442483.494:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd830b2add9 code=0x7ffc0000 [ 2434.050018][ T30] audit: type=1326 audit(1755442483.494:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd830b85ba7 code=0x7ffc0000 [ 2434.075715][ T30] audit: type=1326 audit(1755442483.494:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd830b2add9 code=0x7ffc0000 [ 2434.099251][ T30] audit: type=1326 audit(1755442483.494:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd830b85ba7 code=0x7ffc0000 [ 2434.122145][ T30] audit: type=1326 audit(1755442483.494:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd830b2add9 code=0x7ffc0000 [ 2434.151662][ T30] audit: type=1326 audit(1755442483.494:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd830b85ba7 code=0x7ffc0000 [ 2434.177159][ T30] audit: type=1326 audit(1755442483.494:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22951 comm="syz.5.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd830b2add9 code=0x7ffc0000 [ 2434.733733][T22960] loop5: detected capacity change from 0 to 128 [ 2434.928179][T22959] syz.5.5525: attempt to access beyond end of device [ 2434.928179][T22959] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 2437.396024][T22989] loop5: detected capacity change from 0 to 128 [ 2437.617885][T22988] syz.5.5539: attempt to access beyond end of device [ 2437.617885][T22988] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 2438.020425][T22996] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5542'. [ 2440.743208][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2440.743299][ T30] audit: type=1326 audit(1755442490.394:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2440.773184][ T30] audit: type=1326 audit(1755442490.394:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.300050][ T30] audit: type=1326 audit(1755442490.534:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.329528][ T30] audit: type=1326 audit(1755442490.544:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.355705][ T30] audit: type=1326 audit(1755442490.544:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.379529][ T30] audit: type=1326 audit(1755442490.554:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.402603][ T30] audit: type=1326 audit(1755442490.614:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.429757][ T30] audit: type=1326 audit(1755442490.624:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.458071][ T30] audit: type=1326 audit(1755442490.634:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.481894][ T30] audit: type=1326 audit(1755442490.644:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23019 comm="syz.2.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd24558ebe9 code=0x7ffc0000 [ 2441.845507][T23024] loop5: detected capacity change from 0 to 128 [ 2442.002052][T23023] syz.5.5554: attempt to access beyond end of device [ 2442.002052][T23023] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 2442.279286][T23030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5557'. [ 2443.505101][T23038] netlink: 'syz.1.5560': attribute type 2 has an invalid length. [ 2443.711629][T23034] loop3: detected capacity change from 0 to 2048 [ 2444.349039][T23041] loop5: detected capacity change from 0 to 512 [ 2444.456655][T23041] EXT4-fs: Ignoring removed bh option [ 2444.517114][T23041] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2444.639655][T23041] EXT4-fs (loop5): 1 truncate cleaned up [ 2444.652077][T23041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2445.765385][T23053] siw: device registration error -23 [ 2446.214195][T23034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2446.600246][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2447.085339][T21187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2447.904096][T22300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2449.563010][ T42] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2449.620645][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2449.620749][ T30] audit: type=1326 audit(1755442499.284:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd830b8ebe9 code=0x7ffc0000 [ 2449.703937][ T30] audit: type=1326 audit(1755442499.324:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd830b8ebe9 code=0x7ffc0000 [ 2449.737336][ T30] audit: type=1326 audit(1755442499.324:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd830b8ebe9 code=0x7ffc0000 [ 2449.760372][ T30] audit: type=1326 audit(1755442499.334:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd830b8ebe9 code=0x7ffc0000 [ 2449.785505][ T30] audit: type=1326 audit(1755442499.334:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd830b8ebe9 code=0x7ffc0000 [ 2449.816927][ T30] audit: type=1326 audit(1755442499.334:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd830b8ec23 code=0x7ffc0000 [ 2449.842303][ T30] audit: type=1326 audit(1755442499.364:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd830b8d69f code=0x7ffc0000 [ 2449.890207][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2449.901803][ T42] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2449.920111][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.955379][ T42] usb 3-1: config 0 descriptor?? [ 2449.963903][T23084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2450.050442][T23086] loop5: detected capacity change from 0 to 2048 [ 2450.058323][ T30] audit: type=1326 audit(1755442499.694:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd830b8ec77 code=0x7ffc0000 [ 2450.081936][ T30] audit: type=1326 audit(1755442499.714:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd830b8d550 code=0x7ffc0000 [ 2450.105210][ T30] audit: type=1326 audit(1755442499.714:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.5.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd830b8e7eb code=0x7ffc0000 [ 2450.335012][T23086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2450.539289][ T42] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 2450.774481][ T42] usb 3-1: USB disconnect, device number 13 [ 2450.820697][T23104] loop3: detected capacity change from 0 to 128 [ 2450.920914][T22300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2450.948887][T23103] syz.3.5582: attempt to access beyond end of device [ 2450.948887][T23103] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 2452.668196][T23132] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2453.181693][T23141] loop3: detected capacity change from 0 to 128 [ 2453.205762][T23136] loop6: detected capacity change from 0 to 2048 [ 2453.296237][T23142] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5595'. [ 2453.352526][T23136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2453.826160][T17819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2455.621769][T23178] serio: Serial port ptm0 [ 2456.131972][T23183] lo speed is unknown, defaulting to 1000 [ 2456.290198][T23188] netlink: 'syz.3.5613': attribute type 4 has an invalid length. [ 2456.299740][T23188] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5613'. [ 2457.016374][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2457.016484][ T30] audit: type=1800 audit(1755442506.684:3458): pid=23189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5615" name="/" dev="fuse" ino=5 res=0 errno=0 [ 2457.318389][T23196] loop5: detected capacity change from 0 to 128 [ 2457.859386][ T30] audit: type=1804 audit(1755442507.524:3459): pid=23199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5617" name="/newroot/45/file0/bus" dev="loop5" ino=1048779 res=1 errno=0 [ 2462.293219][T23078] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa8 [ 2462.309951][T23078] ===================================================== [ 2462.320827][T23078] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2b0b/0x42b0 [ 2462.329357][T23078] nci_ntf_packet+0x2b0b/0x42b0 [ 2462.334662][T23078] nci_rx_work+0x403/0x750 [ 2462.339273][T23078] process_scheduled_works+0xb91/0x1d80 [ 2462.345349][T23078] worker_thread+0xedf/0x1590 [ 2462.350251][T23078] kthread+0xd59/0xf00 [ 2462.354611][T23078] ret_from_fork+0x1e3/0x310 [ 2462.359372][T23078] ret_from_fork_asm+0x1a/0x30 [ 2462.364485][T23078] [ 2462.366903][T23078] Uninit was created at: [ 2462.371428][T23078] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 2462.377707][T23078] kmalloc_reserve+0x13c/0x4b0 [ 2462.382784][T23078] __alloc_skb+0x347/0x7d0 [ 2462.387382][T23078] virtual_ncidev_write+0x6b/0x430 [ 2462.392824][T23078] vfs_write+0x48a/0x15d0 [ 2462.397371][T23078] __x64_sys_write+0x1fb/0x4d0 [ 2462.410437][T23078] x64_sys_call+0x3014/0x3e20 [ 2462.418824][T23078] do_syscall_64+0xd9/0x210 [ 2462.423635][T23078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.429708][T23078] [ 2462.432196][T23078] CPU: 1 UID: 0 PID: 23078 Comm: kworker/u8:18 Tainted: G W 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(none) [ 2462.446582][T23078] Tainted: [W]=WARN [ 2462.450502][T23078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2462.460893][T23078] Workqueue: nfc3_nci_rx_wq nci_rx_work [ 2462.466824][T23078] ===================================================== [ 2462.473979][T23078] Disabling lock debugging due to kernel taint [ 2462.480269][T23078] Kernel panic - not syncing: kmsan.panic set ... [ 2462.486826][T23078] CPU: 1 UID: 0 PID: 23078 Comm: kworker/u8:18 Tainted: G B W 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(none) [ 2462.500978][T23078] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2462.506099][T23078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2462.516320][T23078] Workqueue: nfc3_nci_rx_wq nci_rx_work [ 2462.522144][T23078] Call Trace: [ 2462.525543][T23078] [ 2462.528588][T23078] __dump_stack+0x26/0x30 [ 2462.533131][T23078] dump_stack_lvl+0x53/0x270 [ 2462.537949][T23078] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2462.543984][T23078] dump_stack+0x1e/0x25 [ 2462.548352][T23078] vpanic+0x361/0xc50 [ 2462.552563][T23078] panic+0x15d/0x160 [ 2462.556724][T23078] kmsan_report+0x31c/0x320 [ 2462.561450][T23078] ? __msan_warning+0x1b/0x30 [ 2462.566305][T23078] ? nci_ntf_packet+0x2b0b/0x42b0 [ 2462.571603][T23078] ? nci_rx_work+0x403/0x750 [ 2462.576422][T23078] ? process_scheduled_works+0xb91/0x1d80 [ 2462.582386][T23078] ? worker_thread+0xedf/0x1590 [ 2462.587469][T23078] ? kthread+0xd59/0xf00 [ 2462.591881][T23078] ? ret_from_fork+0x1e3/0x310 [ 2462.596801][T23078] ? ret_from_fork_asm+0x1a/0x30 [ 2462.602031][T23078] ? ret_from_fork_asm+0x1a/0x30 [ 2462.607163][T23078] ? vprintk_emit+0xab3/0xcd0 [ 2462.612042][T23078] ? vprintk_default+0x3f/0x50 [ 2462.616981][T23078] ? vprintk+0x36/0x50 [ 2462.621251][T23078] ? _printk+0x17e/0x1b0 [ 2462.625740][T23078] ? kmsan_get_metadata+0xfb/0x160 [ 2462.631049][T23078] __msan_warning+0x1b/0x30 [ 2462.635722][T23078] nci_ntf_packet+0x2b0b/0x42b0 [ 2462.640804][T23078] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2462.647114][T23078] ? sk_skb_reason_drop+0x13f/0x440 [ 2462.652532][T23078] nci_rx_work+0x403/0x750 [ 2462.657164][T23078] ? __pfx_nci_rx_work+0x10/0x10 [ 2462.662304][T23078] process_scheduled_works+0xb91/0x1d80 [ 2462.668103][T23078] worker_thread+0xedf/0x1590 [ 2462.673021][T23078] kthread+0xd59/0xf00 [ 2462.677241][T23078] ? __pfx_worker_thread+0x10/0x10 [ 2462.682579][T23078] ? __pfx_kthread+0x10/0x10 [ 2462.687333][T23078] ret_from_fork+0x1e3/0x310 [ 2462.692094][T23078] ? __pfx_kthread+0x10/0x10 [ 2462.696864][T23078] ret_from_fork_asm+0x1a/0x30 [ 2462.701872][T23078] [ 2462.705358][T23078] Kernel Offset: disabled [ 2462.709751][T23078] Rebooting in 86400 seconds..