last executing test programs: 15m19.886589559s ago: executing program 3 (id=1647): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x411, &(0x7f00000000c0), 0x1, 0x623, &(0x7f0000002f00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 15m19.042568789s ago: executing program 3 (id=1652): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) syz_emit_ethernet(0xffffffffffffffe3, 0x0, 0x0) 15m18.079855998s ago: executing program 3 (id=1659): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) 15m17.456751386s ago: executing program 3 (id=1664): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) 15m16.884537183s ago: executing program 3 (id=1667): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4b4, &(0x7f00000014c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 15m15.9653239s ago: executing program 3 (id=1673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3c700fe0000000072101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) 15m0.741514247s ago: executing program 32 (id=1673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3c700fe0000000072101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) 11m8.339613652s ago: executing program 4 (id=3061): socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000200000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c982}, 0x0) 11m7.227221364s ago: executing program 4 (id=3065): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x576, &(0x7f0000000d00)="$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") r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x40004) 11m6.157705438s ago: executing program 4 (id=3067): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="8a", 0x1}], 0x1, 0x6) sendmmsg$unix(r3, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1, 0x0, 0x0, 0x24004080}}], 0x1, 0x4000) 11m5.361467399s ago: executing program 4 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 11m4.167681046s ago: executing program 4 (id=3075): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 11m3.667604135s ago: executing program 4 (id=3079): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x5, [@remote]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, &(0x7f0000000540)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 10m48.325471416s ago: executing program 33 (id=3079): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x5, [@remote]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, &(0x7f0000000540)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 7m23.336488921s ago: executing program 1 (id=4309): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r1, r1, 0x2f, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) close(0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x80000000) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r9, 0x0, r9, 0x0, 0x1000) 7m20.839295684s ago: executing program 1 (id=4328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_receive\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) mprotect(&(0x7f000021e000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c00"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) r9 = dup(r7) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 7m20.357380307s ago: executing program 1 (id=4331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001480)={0x0, 0xd, 0x1a}) 7m19.92356568s ago: executing program 1 (id=4333): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)={0x2, 0x9, 0x0, 0x3, 0x9, 0x0, 0x4070bdac, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}]}, 0x48}, 0x1, 0x7}, 0x0) 7m19.767915076s ago: executing program 1 (id=4336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000380)="b82009056016fb01a7f3ad63af20", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m19.360311536s ago: executing program 1 (id=4340): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x80, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x5, [@remote]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, &(0x7f0000000540)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) unshare(0x20060400) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_regs={0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 7m4.112100705s ago: executing program 34 (id=4340): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x80, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x5, [@remote]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, &(0x7f0000000540)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) unshare(0x20060400) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_regs={0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 6.074331554s ago: executing program 7 (id=6829): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380", @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) 5.643509597s ago: executing program 7 (id=6833): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) 5.279078399s ago: executing program 7 (id=6838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x3e8) 5.034325202s ago: executing program 0 (id=6840): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r1, r1, 0x2f, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) close(0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x80000000) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r9, 0x0, r9, 0x0, 0x1000) 5.013082388s ago: executing program 6 (id=6841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 4.812708919s ago: executing program 7 (id=6843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x3, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}]}, 0x3c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) 4.179863572s ago: executing program 7 (id=6844): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) 3.637968964s ago: executing program 6 (id=6848): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) 3.303920502s ago: executing program 2 (id=6849): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 3.235071227s ago: executing program 6 (id=6850): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) close(r2) 3.008679929s ago: executing program 7 (id=6852): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000900), &(0x7f00000002c0)=r2}, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9) 2.83615506s ago: executing program 2 (id=6853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x3e8) 2.794640905s ago: executing program 6 (id=6854): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2.760486685s ago: executing program 5 (id=6855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071101c000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.346629632s ago: executing program 0 (id=6856): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 2.179633522s ago: executing program 2 (id=6857): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 2.179159752s ago: executing program 6 (id=6858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 2.134843758s ago: executing program 5 (id=6859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 1.860070575s ago: executing program 0 (id=6860): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) 1.730095061s ago: executing program 2 (id=6861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.603494939s ago: executing program 5 (id=6862): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.430798285s ago: executing program 0 (id=6863): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 1.335689082s ago: executing program 2 (id=6864): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) close(r2) 1.169108386s ago: executing program 5 (id=6865): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e24, 0x0, @remote, 0x100}, r1}}, 0x38) 721.641007ms ago: executing program 2 (id=6866): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r1, r1, 0x2f, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) close(0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x80000000) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r9, 0x0, r9, 0x0, 0x1000) 646.903452ms ago: executing program 6 (id=6867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x80, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x111, 0x6}}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}}, 0x0) sched_setscheduler(r9, 0x5, &(0x7f0000000180)=0x3) 582.094685ms ago: executing program 5 (id=6868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xd07, 0x0, 0xffffffff}, 0x10) close(r2) 512.110621ms ago: executing program 0 (id=6869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 27.794111ms ago: executing program 0 (id=6870): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=6871): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ity change from 0 to 4096 [ 1229.893856][T21192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.196771][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.626121][T21204] 9pnet_fd: Insufficient options for proto=fd [ 1231.560075][T21217] loop5: detected capacity change from 0 to 128 [ 1231.694244][ T30] audit: type=1800 audit(1764653416.626:6499): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5707" name="file1" dev="loop5" ino=1048685 res=0 errno=0 [ 1231.763748][T21219] netlink: 212 bytes leftover after parsing attributes in process `syz.7.5708'. [ 1232.345082][T21240] 9pnet_fd: Insufficient options for proto=fd [ 1233.064863][T21254] netlink: 212 bytes leftover after parsing attributes in process `syz.7.5722'. [ 1233.386702][T21257] loop5: detected capacity change from 0 to 128 [ 1233.479493][ T30] audit: type=1800 audit(1764653418.406:6500): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5723" name="file1" dev="loop5" ino=1048686 res=0 errno=0 [ 1234.945201][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1236.364759][T21297] 9pnet_fd: Insufficient options for proto=fd [ 1236.794330][T21306] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5734'. [ 1236.934229][T21302] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1238.982267][T21333] 9pnet_fd: Insufficient options for proto=fd [ 1239.348161][T21311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5737'. [ 1239.357955][T21311] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1239.380451][T21339] netlink: 212 bytes leftover after parsing attributes in process `syz.7.5747'. [ 1239.398414][T21341] loop5: detected capacity change from 0 to 512 [ 1239.431951][T21341] EXT4-fs: Ignoring removed orlov option [ 1239.459522][T21341] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1239.542780][T21341] EXT4-fs error (device loop5): ext4_iget_extra_inode:5071: inode #15: comm syz.5.5748: corrupted in-inode xattr: e_value size too large [ 1239.560003][T21341] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5748: couldn't read orphan inode 15 (err -117) [ 1239.621760][T21341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.864257][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.939030][T21364] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1240.948509][T21364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1241.157308][T21368] netlink: 'syz.6.5759': attribute type 3 has an invalid length. [ 1241.237466][T21370] loop5: detected capacity change from 0 to 512 [ 1241.293779][T21370] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.5760: inode has both inline data and extents flags [ 1241.328724][T21370] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5760: couldn't read orphan inode 15 (err -117) [ 1241.344152][T21370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.564488][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.118099][T21389] tipc: Enabling of bearer rejected, already enabled [ 1242.219825][ T30] audit: type=1800 audit(1764653427.146:6501): pid=21388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5768" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1242.295200][T21392] loop5: detected capacity change from 0 to 128 [ 1242.430643][T21392] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1242.461466][T21392] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.862887][T18397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1244.186909][T21426] tipc: Enabling of bearer rejected, already enabled [ 1245.041420][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5793'. [ 1245.621958][T21458] block device autoloading is deprecated and will be removed. [ 1245.707412][T21458] tipc: Enabled bearer , priority 10 [ 1246.534188][T21475] smc: net device bond0 applied user defined pnetid SYZ0 [ 1246.570758][T21475] smc: net device bond0 erased user defined pnetid SYZ0 [ 1246.699497][ T24] tipc: Node number set to 3209795556 [ 1247.130757][T21491] tipc: Enabling of bearer rejected, already enabled [ 1247.386356][T21494] loop0: detected capacity change from 0 to 512 [ 1247.403630][T21494] EXT4-fs: Ignoring removed i_version option [ 1247.410412][T21494] EXT4-fs: Ignoring removed bh option [ 1247.550695][T21498] loop5: detected capacity change from 0 to 128 [ 1247.582066][T21494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.589507][T21498] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1247.626868][T21494] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.664125][T21498] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.707634][ T30] audit: type=1800 audit(1764653432.626:6502): pid=21494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5812" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1247.882116][T13961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.048896][T18397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1248.184938][T21507] Falling back ldisc for ttyS3. [ 1248.196693][T21509] loop0: detected capacity change from 0 to 128 [ 1248.230616][T21509] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1248.317871][T21509] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1248.429663][T21509] EXT4-fs (loop0): shut down requested (2) [ 1248.611396][T13961] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1248.907863][T21525] tipc: Enabling of bearer rejected, already enabled [ 1249.181995][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5827'. [ 1250.996302][T21566] tipc: Enabling of bearer rejected, already enabled [ 1251.080891][T21569] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5842'. [ 1251.090787][T21569] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1251.350655][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1252.579391][T21602] tipc: Enabling of bearer rejected, already enabled [ 1252.752350][T21607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1252.762013][T21607] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1253.342317][T21619] netlink: 'gtp': attribute type 39 has an invalid length. [ 1253.781737][T21631] tipc: Enabled bearer , priority 0 [ 1253.833843][T21631] tipc: Resetting bearer [ 1253.874380][T21630] tipc: Disabling bearer [ 1254.209289][ T30] audit: type=1326 audit(1764653439.136:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.232782][ T30] audit: type=1326 audit(1764653439.136:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.256442][ T30] audit: type=1326 audit(1764653439.146:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.385757][ T30] audit: type=1326 audit(1764653439.246:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.410652][ T30] audit: type=1326 audit(1764653439.276:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.413751][T21639] tipc: Enabling of bearer rejected, already enabled [ 1254.433563][ T30] audit: type=1326 audit(1764653439.276:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.468149][ T30] audit: type=1326 audit(1764653439.316:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.490625][ T30] audit: type=1326 audit(1764653439.316:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.513105][ T30] audit: type=1326 audit(1764653439.316:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.535682][ T30] audit: type=1326 audit(1764653439.316:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.5.5868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1254.565226][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1255.180485][T21653] netlink: 'gtp': attribute type 39 has an invalid length. [ 1255.346832][T21657] syzkaller0: entered promiscuous mode [ 1255.352705][T21657] syzkaller0: entered allmulticast mode [ 1255.807423][T21670] tipc: Enabled bearer , priority 0 [ 1255.862334][T21670] tipc: Resetting bearer [ 1255.895628][T21668] tipc: Disabling bearer [ 1256.300232][T21676] tipc: Enabling of bearer rejected, already enabled [ 1256.366376][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5882'. [ 1256.993425][T21694] syzkaller0: entered promiscuous mode [ 1256.999318][T21694] syzkaller0: entered allmulticast mode [ 1257.223326][T21700] tipc: Enabled bearer , priority 0 [ 1257.241049][T21700] tipc: Resetting bearer [ 1257.273928][T21699] tipc: Disabling bearer [ 1257.748505][T21710] tipc: Enabling of bearer rejected, already enabled [ 1257.968410][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1258.323482][T21722] 9pnet_fd: Insufficient options for proto=fd [ 1259.113146][T21735] syzkaller0: entered promiscuous mode [ 1259.118806][T21735] syzkaller0: entered allmulticast mode [ 1259.754490][T21745] tipc: Enabling of bearer rejected, already enabled [ 1259.964922][T21756] loop5: detected capacity change from 0 to 128 [ 1260.050279][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1260.050355][ T30] audit: type=1800 audit(1764653444.976:6519): pid=21756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5913" name="file1" dev="loop5" ino=1048687 res=0 errno=0 [ 1260.797041][T21773] syzkaller0: entered promiscuous mode [ 1260.802951][T21773] syzkaller0: entered allmulticast mode [ 1261.476443][T21788] loop0: detected capacity change from 0 to 128 [ 1261.573708][ T30] audit: type=1800 audit(1764653446.506:6520): pid=21788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5928" name="file1" dev="loop0" ino=1048688 res=0 errno=0 [ 1262.156084][T21802] loop0: detected capacity change from 0 to 512 [ 1262.188700][T21802] EXT4-fs: Ignoring removed bh option [ 1262.215334][T21802] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1262.282862][T21802] EXT4-fs (loop0): 1 truncate cleaned up [ 1262.290910][T21802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1262.415249][T13961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.638692][T21821] 9pnet_fd: Insufficient options for proto=fd [ 1264.335062][ T30] audit: type=1326 audit(1764653449.246:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.439509][ T30] audit: type=1326 audit(1764653449.306:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.462544][ T30] audit: type=1326 audit(1764653449.306:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.485325][ T30] audit: type=1326 audit(1764653449.306:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.507954][ T30] audit: type=1326 audit(1764653449.336:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.530915][ T30] audit: type=1326 audit(1764653449.336:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.555567][ T30] audit: type=1326 audit(1764653449.336:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.578096][ T30] audit: type=1326 audit(1764653449.336:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1264.950766][T21842] loop0: detected capacity change from 0 to 512 [ 1265.034586][T21842] EXT4-fs: Ignoring removed oldalloc option [ 1265.041191][T21842] EXT4-fs: Ignoring removed mblk_io_submit option [ 1265.118516][T21842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1265.171795][T21842] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1265.218128][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1265.222478][T21842] __quota_error: 75 callbacks suppressed [ 1265.222558][T21842] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 1265.241415][T21842] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1265.251089][T21842] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5947: Failed to acquire dquot type 1 [ 1265.260918][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1265.280217][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1265.295269][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1265.306258][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1265.328854][T21842] EXT4-fs (loop0): 1 truncate cleaned up [ 1265.381648][T21842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1265.403212][T21851] lo speed is unknown, defaulting to 1000 [ 1265.451056][ T30] audit: type=1326 audit(1764653450.386:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.588600][ T30] audit: type=1326 audit(1764653450.406:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.611282][ T30] audit: type=1326 audit(1764653450.416:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.633866][ T30] audit: type=1326 audit(1764653450.416:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.656388][ T30] audit: type=1326 audit(1764653450.456:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.679745][ T30] audit: type=1326 audit(1764653450.466:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.702297][ T30] audit: type=1326 audit(1764653450.466:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.725484][ T30] audit: type=1326 audit(1764653450.466:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1265.812410][T21842] EXT4-fs: Ignoring removed orlov option [ 1265.818630][T21842] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1265.829775][T21842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1265.887906][T21842] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1266.016581][T21842] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.5947: Abort forced by user [ 1266.050020][T21842] EXT4-fs (loop0): Remounting filesystem read-only [ 1266.056825][T21842] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1266.065686][T21842] ext4 filesystem being remounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.250456][T21851] chnl_net:caif_netlink_parms(): no params data found [ 1266.334343][T13961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.675453][T21870] 9pnet_fd: Insufficient options for proto=fd [ 1267.306209][T21851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.313936][T21851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.326882][T21851] bridge_slave_0: entered allmulticast mode [ 1267.336478][T21851] bridge_slave_0: entered promiscuous mode [ 1267.355612][T21851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.366890][T21851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.376710][T21851] bridge_slave_1: entered allmulticast mode [ 1267.379962][ T5809] Bluetooth: hci5: command tx timeout [ 1267.388933][T21851] bridge_slave_1: entered promiscuous mode [ 1267.848918][T21851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.930160][T21851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.144804][T21851] team0: Port device team_slave_0 added [ 1268.203820][T21851] team0: Port device team_slave_1 added [ 1268.221577][T21900] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5965'. [ 1268.422107][ T1144] bridge_slave_1: left allmulticast mode [ 1268.428061][ T1144] bridge_slave_1: left promiscuous mode [ 1268.436086][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.470243][ T1144] bridge_slave_0: left allmulticast mode [ 1268.476179][ T1144] bridge_slave_0: left promiscuous mode [ 1268.484268][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.512610][T21904] loop5: detected capacity change from 0 to 2048 [ 1268.668655][T21904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.778726][ T1144] bond0 (unregistering): (slave bond1): Releasing active interface [ 1268.801966][ T1144] bond0 (unregistering): Released all slaves [ 1268.834125][ T1144] bond1 (unregistering): Released all slaves [ 1268.930429][ T1144] bond2 (unregistering): (slave bond3): Releasing active interface [ 1268.942970][ T1144] bond2 (unregistering): Released all slaves [ 1268.961733][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.963890][ T1144] bond3 (unregistering): Released all slaves [ 1269.030609][ T1144] bond4 (unregistering): (slave bond5): Releasing active interface [ 1269.041568][ T1144] bond4 (unregistering): Released all slaves [ 1269.075053][ T1144] bond5 (unregistering): Released all slaves [ 1269.118842][ T1144] bond6 (unregistering): (slave bond7): Releasing active interface [ 1269.159306][ T1144] bond6 (unregistering): Released all slaves [ 1269.180509][ T1144] bond7 (unregistering): Released all slaves [ 1269.203545][ T1144] bond8 (unregistering): (slave bond9): Releasing active interface [ 1269.215246][ T1144] bond8 (unregistering): Released all slaves [ 1269.280338][ T1144] bond9 (unregistering): Released all slaves [ 1269.314038][ T1144] bond10 (unregistering): (slave bond11): Releasing active interface [ 1269.326782][ T1144] bond10 (unregistering): Released all slaves [ 1269.358233][ T1144] bond11 (unregistering): Released all slaves [ 1269.379359][ T1144] bond12 (unregistering): Released all slaves [ 1269.404554][ T1144] bond13 (unregistering): Released all slaves [ 1269.447308][ T1144] bond14 (unregistering): Released all slaves [ 1269.468565][ T1144] bond15 (unregistering): Released all slaves [ 1269.479723][ T5809] Bluetooth: hci5: command tx timeout [ 1269.488966][ T1144] bond16 (unregistering): Released all slaves [ 1269.621433][ T1144] bond17 (unregistering): Released all slaves [ 1269.670119][ T1144] bond18 (unregistering): Released all slaves [ 1269.701479][ T1144] bond19 (unregistering): Released all slaves [ 1269.724719][ T1144] bond20 (unregistering): Released all slaves [ 1269.742817][ T1144] bond21 (unregistering): Released all slaves [ 1269.808219][T21912] netlink: 'syz.2.5970': attribute type 12 has an invalid length. [ 1269.828893][T21851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.836090][T21851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.863048][T21851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.977353][T21851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.985335][T21851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.011974][T21851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.325216][T21851] hsr_slave_0: entered promiscuous mode [ 1270.337324][T21851] hsr_slave_1: entered promiscuous mode [ 1270.345993][T21851] debugfs: 'hsr0' already exists in 'hsr' [ 1270.351950][T21851] Cannot create hsr debugfs directory [ 1270.503707][T21933] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5978'. [ 1270.575951][ T1144] tipc: Disabling bearer [ 1270.581870][ T1144] tipc: Left network mode [ 1271.097430][ T1144] hsr_slave_0: left promiscuous mode [ 1271.117230][ T1144] hsr_slave_1: left promiscuous mode [ 1271.125324][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.150262][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1271.150336][ T30] audit: type=1326 audit(1764653456.086:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.165783][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.229583][ T30] audit: type=1326 audit(1764653456.126:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.254417][ T30] audit: type=1326 audit(1764653456.126:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.277060][ T30] audit: type=1326 audit(1764653456.126:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.299540][ T30] audit: type=1326 audit(1764653456.136:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.322259][ T30] audit: type=1326 audit(1764653456.136:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.344770][ T30] audit: type=1326 audit(1764653456.136:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.367250][ T30] audit: type=1326 audit(1764653456.136:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.390341][ T30] audit: type=1326 audit(1764653456.136:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.412921][ T30] audit: type=1326 audit(1764653456.136:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.5.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1271.532262][ T5809] Bluetooth: hci5: command tx timeout [ 1271.900463][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 1271.963564][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 1273.212472][T21973] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1273.522082][T21851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1273.546275][T21851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1273.570442][T21851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1273.593927][T21851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1273.617430][ T5809] Bluetooth: hci5: command tx timeout [ 1274.756109][T21851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.961461][T21851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.054087][T16428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.061638][T16428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.116893][T16428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.124458][T16428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.030829][T22017] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1276.328433][T21851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.799602][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6006'. [ 1277.834524][T22059] netlink: 204 bytes leftover after parsing attributes in process `syz.7.6014'. [ 1277.986608][T21851] veth0_vlan: entered promiscuous mode [ 1278.058628][T21851] veth1_vlan: entered promiscuous mode [ 1278.307669][T21851] veth0_macvtap: entered promiscuous mode [ 1278.356174][T21851] veth1_macvtap: entered promiscuous mode [ 1278.443445][T21851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.500072][T21851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.548308][T16428] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.577600][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1278.577680][ T30] audit: type=1326 audit(1764653463.506:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.607189][ T30] audit: type=1326 audit(1764653463.506:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.629782][ T30] audit: type=1326 audit(1764653463.506:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.652488][ T30] audit: type=1326 audit(1764653463.506:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.674982][ T30] audit: type=1326 audit(1764653463.506:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.675423][ T3882] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.697565][ T30] audit: type=1326 audit(1764653463.576:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.728508][ T30] audit: type=1326 audit(1764653463.576:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.751084][ T30] audit: type=1326 audit(1764653463.576:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.773594][ T30] audit: type=1326 audit(1764653463.656:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.796118][ T30] audit: type=1326 audit(1764653463.656:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22067 comm="syz.7.6016" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.796338][ T3882] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.880422][ T3882] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.936167][T22074] loop0: detected capacity change from 0 to 128 [ 1279.850275][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6023'. [ 1280.237777][T22096] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6025'. [ 1282.087376][T22140] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1282.149501][T22143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1282.216962][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6038'. [ 1282.804322][T16428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.815437][T16428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.899987][T16412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.908000][T16412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.055636][T22180] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1284.790211][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1284.799274][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1284.810720][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1284.824265][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1284.835491][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1285.019926][T22188] netlink: 'syz.6.6053': attribute type 6 has an invalid length. [ 1285.053068][T22186] lo speed is unknown, defaulting to 1000 [ 1285.240472][T22193] loop0: detected capacity change from 0 to 164 [ 1285.336661][T22193] syz.0.6054: attempt to access beyond end of device [ 1285.336661][T22193] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1285.351074][T22193] syz.0.6054: attempt to access beyond end of device [ 1285.351074][T22193] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1286.322834][T22186] chnl_net:caif_netlink_parms(): no params data found [ 1286.901550][ T5801] Bluetooth: hci0: command tx timeout [ 1287.399844][T16431] bridge_slave_1: left allmulticast mode [ 1287.405768][T16431] bridge_slave_1: left promiscuous mode [ 1287.412612][T16431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.427884][T16431] bridge_slave_0: left allmulticast mode [ 1287.434059][T16431] bridge_slave_0: left promiscuous mode [ 1287.440693][T16431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.803184][T16431] bond0 (unregistering): Released all slaves [ 1287.823382][T16431] bond1 (unregistering): Released all slaves [ 1287.916872][T16431] bond2 (unregistering): (slave bond3): Releasing active interface [ 1287.940035][T16431] bond2 (unregistering): Released all slaves [ 1287.961503][T16431] bond3 (unregistering): Released all slaves [ 1287.987061][T16431] bond4 (unregistering): Released all slaves [ 1288.008148][T16431] bond5 (unregistering): Released all slaves [ 1288.078146][T16431] bond6 (unregistering): Released all slaves [ 1288.100134][T16431] bond7 (unregistering): Released all slaves [ 1288.135350][T16431] bond8 (unregistering): Released all slaves [ 1288.211965][T16431] bond9 (unregistering): (slave bond10): Releasing active interface [ 1288.223093][T16431] bond9 (unregistering): Released all slaves [ 1288.246139][T16431] bond10 (unregistering): Released all slaves [ 1288.279542][T16431] bond11 (unregistering): (slave bond12): Releasing active interface [ 1288.305787][T22235] netlink: 'syz.0.6067': attribute type 6 has an invalid length. [ 1288.319560][T16431] bond11 (unregistering): Released all slaves [ 1288.342005][T16431] bond12 (unregistering): Released all slaves [ 1288.381318][T16431] bond13 (unregistering): (slave bond14): Releasing active interface [ 1288.441297][T16431] bond13 (unregistering): Released all slaves [ 1288.468630][T16431] bond14 (unregistering): Released all slaves [ 1288.506204][T16431] bond15 (unregistering): (slave bond16): Releasing active interface [ 1288.545672][T16431] bond15 (unregistering): Released all slaves [ 1288.546027][T22239] loop5: detected capacity change from 0 to 128 [ 1288.571259][T16431] bond16 (unregistering): Released all slaves [ 1288.593542][T16431] bond17 (unregistering): Released all slaves [ 1288.616136][T16431] bond18 (unregistering): Released all slaves [ 1288.637426][T16431] bond19 (unregistering): Released all slaves [ 1288.790078][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 1288.790156][ T30] audit: type=1800 audit(1764653473.716:6826): pid=22239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6068" name="file1" dev="loop5" ino=1048695 res=0 errno=0 [ 1288.970058][ T5801] Bluetooth: hci0: command tx timeout [ 1288.994135][T22186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.003861][T22186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.011688][T22186] bridge_slave_0: entered allmulticast mode [ 1289.021249][T22186] bridge_slave_0: entered promiscuous mode [ 1289.038555][T22186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.046227][T22186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.056194][T22186] bridge_slave_1: entered allmulticast mode [ 1289.066102][T22186] bridge_slave_1: entered promiscuous mode [ 1289.174412][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.195594][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.256770][T16431] tipc: Disabling bearer [ 1289.262400][T16431] tipc: Left network mode [ 1289.351665][T22186] team0: Port device team_slave_0 added [ 1289.385604][T22186] team0: Port device team_slave_1 added [ 1289.610375][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.617615][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.644115][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.716507][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.727525][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.754299][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.853015][T16431] hsr_slave_0: left promiscuous mode [ 1289.881302][T16431] hsr_slave_1: left promiscuous mode [ 1289.888938][T16431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.921680][T16431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.297814][T16431] team0 (unregistering): Port device team_slave_1 removed [ 1290.413823][T16431] team0 (unregistering): Port device team_slave_0 removed [ 1290.837534][T22266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6078'. [ 1290.983504][T22264] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1291.049655][ T5801] Bluetooth: hci0: command tx timeout [ 1291.349776][T22272] netlink: 'syz.5.6079': attribute type 6 has an invalid length. [ 1292.660958][T22186] hsr_slave_0: entered promiscuous mode [ 1292.671039][T22186] hsr_slave_1: entered promiscuous mode [ 1292.679458][T22186] debugfs: 'hsr0' already exists in 'hsr' [ 1292.685324][T22186] Cannot create hsr debugfs directory [ 1293.139766][ T5801] Bluetooth: hci0: command tx timeout [ 1293.351271][ T1144] Bluetooth: hci3: Frame reassembly failed (-84) [ 1293.682555][T22295] loop0: detected capacity change from 0 to 1024 [ 1293.941568][T22186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1293.952285][T22300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1293.964104][T22186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1294.042371][T22186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1294.073128][T22186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1294.526184][T22186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.592615][T22186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.640749][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.648201][T16412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.704205][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.711825][T16412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.767211][T22305] 9pnet_fd: Insufficient options for proto=fd [ 1295.372535][ T5801] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1296.062534][T22186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.077619][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6095'. [ 1296.468718][T22186] veth0_vlan: entered promiscuous mode [ 1296.587877][T22186] veth1_vlan: entered promiscuous mode [ 1296.826434][T22186] veth0_macvtap: entered promiscuous mode [ 1296.854723][T22186] veth1_macvtap: entered promiscuous mode [ 1297.043448][T22186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.119984][T22186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.140626][T22337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6100'. [ 1297.176756][T16430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.207253][T16430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.253166][T16430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.273816][T16430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.660953][T22345] 9pnet_fd: Insufficient options for proto=fd [ 1299.375848][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6109'. [ 1299.601225][T22383] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6112'. [ 1299.638814][T22385] bridge_slave_0: left allmulticast mode [ 1299.644938][T22385] bridge_slave_0: left promiscuous mode [ 1299.651826][T22385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.724505][T22385] bridge_slave_1: left allmulticast mode [ 1299.734842][T22385] bridge_slave_1: left promiscuous mode [ 1299.741631][T22385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.835754][T22385] team0: Port device team_slave_0 removed [ 1299.894413][T22385] team0: Port device team_slave_1 removed [ 1299.902275][T22385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.942073][T22385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.966938][T22385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1299.999867][T22389] loop5: detected capacity change from 0 to 128 [ 1300.072805][T22389] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1300.107167][T22389] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1300.184111][T22389] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.6114: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1300.241395][T22389] EXT4-fs (loop5): Remounting filesystem read-only [ 1300.545388][T18397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1301.411229][T16411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.419537][T16411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.508235][T16426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.516442][T16426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.929632][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6123'. [ 1301.946920][T22422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6124'. [ 1302.014646][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6125'. [ 1302.024184][ T30] audit: type=1326 audit(1764653486.946:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.046900][ T30] audit: type=1326 audit(1764653486.946:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.069482][ T30] audit: type=1326 audit(1764653486.946:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.092100][ T30] audit: type=1326 audit(1764653486.946:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.114955][ T30] audit: type=1326 audit(1764653486.946:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.233795][ T30] audit: type=1326 audit(1764653487.166:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.240605][T22427] bond0: entered promiscuous mode [ 1302.308597][T22423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6050'. [ 1302.350023][T22427] bond0 (unregistering): Released all slaves [ 1302.429560][ T30] audit: type=1326 audit(1764653487.206:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.452979][ T30] audit: type=1326 audit(1764653487.206:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.475989][ T30] audit: type=1326 audit(1764653487.216:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.500549][ T30] audit: type=1326 audit(1764653487.216:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1302.606191][T22423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.645380][T22423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.676120][T22423] bond0 (unregistering): Released all slaves [ 1303.196620][T22437] loop0: detected capacity change from 0 to 512 [ 1303.248624][T22437] EXT4-fs: Ignoring removed bh option [ 1303.283664][T22437] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1304.212684][T22459] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1304.707260][T22464] bond0: entered promiscuous mode [ 1304.749452][T22471] netlink: 'syz.5.6140': attribute type 3 has an invalid length. [ 1304.757373][T22471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6140'. [ 1304.832003][T22464] bond0 (unregistering): Released all slaves [ 1306.287584][T22503] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1306.309713][T22503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1307.286454][T22515] bond0: entered promiscuous mode [ 1307.315448][T22515] bond0 (unregistering): Released all slaves [ 1308.552640][T22527] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1308.685205][T22530] loop0: detected capacity change from 0 to 164 [ 1308.769704][T22530] syz.0.6164: attempt to access beyond end of device [ 1308.769704][T22530] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1308.784181][T22530] syz.0.6164: attempt to access beyond end of device [ 1308.784181][T22530] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1309.040075][T22535] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1309.076545][T22533] loop5: detected capacity change from 0 to 4096 [ 1309.080898][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1309.158817][T22533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.523630][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.959594][T22551] bond1: entered promiscuous mode [ 1309.989333][T22551] bond1 (unregistering): Released all slaves [ 1310.521029][T22562] loop0: detected capacity change from 0 to 512 [ 1310.577941][T22562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6054e01c, mo2=0102] [ 1310.610478][T22562] System zones: 1-12 [ 1310.627843][T22562] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6178: inode has both inline data and extents flags [ 1310.698626][T22562] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6178: couldn't read orphan inode 15 (err -117) [ 1310.767260][T22562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.844325][T22567] loop5: detected capacity change from 0 to 164 [ 1310.896708][T22567] syz.5.6180: attempt to access beyond end of device [ 1310.896708][T22567] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1310.911066][T22567] syz.5.6180: attempt to access beyond end of device [ 1310.911066][T22567] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1311.034448][T13961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.606055][T22588] bond14: entered promiscuous mode [ 1312.745004][T22588] bond14 (unregistering): Released all slaves [ 1314.887335][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1314.887412][ T30] audit: type=1326 audit(1764653499.796:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1314.917314][ T30] audit: type=1326 audit(1764653499.796:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1314.940736][ T30] audit: type=1326 audit(1764653499.816:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1314.964001][ T30] audit: type=1326 audit(1764653499.816:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1314.987127][ T30] audit: type=1326 audit(1764653499.816:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1315.010462][ T30] audit: type=1326 audit(1764653499.816:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1315.035962][ T30] audit: type=1326 audit(1764653499.826:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1315.061329][ T30] audit: type=1326 audit(1764653499.826:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1315.085551][ T30] audit: type=1326 audit(1764653499.896:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1315.108234][ T30] audit: type=1326 audit(1764653499.946:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.7.6208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1315.205654][T22632] bond1: entered promiscuous mode [ 1315.278502][T22632] bond1 (unregistering): Released all slaves [ 1315.335073][T22639] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1315.345763][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1315.402663][T22638] loop5: detected capacity change from 0 to 1024 [ 1315.424096][T22638] EXT4-fs: Ignoring removed orlov option [ 1315.498620][T22638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.647808][T22647] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1315.848787][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.616890][T22667] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6222'. [ 1316.630893][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6222'. [ 1316.826457][T22671] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1317.783529][T22677] bond14: entered promiscuous mode [ 1317.825871][T22686] loop0: detected capacity change from 0 to 128 [ 1317.899304][T22677] bond14 (unregistering): Released all slaves [ 1318.870861][T22702] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6236'. [ 1318.955082][T22704] netlink: 'syz.7.6235': attribute type 3 has an invalid length. [ 1319.031365][T22705] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6237'. [ 1319.663441][T22712] loop0: detected capacity change from 0 to 512 [ 1319.690855][T22712] EXT4-fs: Ignoring removed oldalloc option [ 1319.697437][T22712] EXT4-fs: Ignoring removed mblk_io_submit option [ 1319.744471][T22712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1319.784820][T22712] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1319.807649][T22712] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6240: Failed to acquire dquot type 1 [ 1319.895783][T22712] EXT4-fs (loop0): 1 truncate cleaned up [ 1319.945154][T22712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1320.006782][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 1320.006859][ T30] audit: type=1326 audit(1764653504.936:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.080875][ T30] audit: type=1326 audit(1764653504.976:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.106314][ T30] audit: type=1326 audit(1764653504.976:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.129870][ T30] audit: type=1326 audit(1764653504.986:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.153144][ T30] audit: type=1326 audit(1764653504.986:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.176594][ T30] audit: type=1326 audit(1764653504.986:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.202053][ T30] audit: type=1326 audit(1764653504.986:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.225821][ T30] audit: type=1326 audit(1764653504.996:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.248351][ T30] audit: type=1326 audit(1764653505.006:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.271152][ T30] audit: type=1326 audit(1764653505.186:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1320.448820][T22712] EXT4-fs: Ignoring removed orlov option [ 1320.455303][T22712] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1320.465599][T22712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1320.530343][T22712] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1320.588567][T22712] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.6240: Abort forced by user [ 1320.618306][T22712] EXT4-fs (loop0): Remounting filesystem read-only [ 1320.625362][T22712] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1320.635918][T22712] ext4 filesystem being remounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1320.863334][T13961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.364054][T22741] tipc: Enabling of bearer rejected, already enabled [ 1321.955065][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1321.980792][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1321.984275][T22748] loop5: detected capacity change from 0 to 128 [ 1321.995932][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1322.017191][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1322.028146][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1322.115114][T22748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1322.123650][T22748] FAT-fs (loop5): Filesystem has been set read-only [ 1322.123782][T22749] lo speed is unknown, defaulting to 1000 [ 1322.130513][T22748] syz.5.6254: attempt to access beyond end of device [ 1322.130513][T22748] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1322.130794][T22748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1322.158259][T22748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1322.360019][T22748] syz.5.6254: attempt to access beyond end of device [ 1322.360019][T22748] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1322.425121][T22748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1322.468117][T22760] netlink: 'gtp': attribute type 39 has an invalid length. [ 1322.470872][T22748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1322.579505][T22748] syz.5.6254: attempt to access beyond end of device [ 1322.579505][T22748] loop5: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 1322.954561][T22749] chnl_net:caif_netlink_parms(): no params data found [ 1323.871207][T22780] tipc: Enabling of bearer rejected, already enabled [ 1324.091723][ T5801] Bluetooth: hci3: command tx timeout [ 1324.216405][T22749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.224368][T22749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.232169][T22749] bridge_slave_0: entered allmulticast mode [ 1324.241817][T22749] bridge_slave_0: entered promiscuous mode [ 1324.326197][T22749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.333943][T22749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.343890][T22749] bridge_slave_1: entered allmulticast mode [ 1324.353362][T22749] bridge_slave_1: entered promiscuous mode [ 1324.690453][T22796] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6269'. [ 1324.722281][T22749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.881377][T22797] bond0: entered promiscuous mode [ 1324.911428][T22797] bond0 (unregistering): Released all slaves [ 1324.981431][T22749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.183593][T22749] team0: Port device team_slave_0 added [ 1325.250490][T22749] team0: Port device team_slave_1 added [ 1325.477254][T22749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.484872][T22749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.513054][T22749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.165617][T16426] bond0 (unregistering): (slave bond1): Releasing active interface [ 1326.177417][ T5801] Bluetooth: hci3: command tx timeout [ 1326.210178][T16426] bond0 (unregistering): Released all slaves [ 1326.237715][T16426] bond1 (unregistering): Released all slaves [ 1326.380932][T16426] bond2 (unregistering): (slave bond3): Releasing active interface [ 1326.447151][T16426] bond2 (unregistering): Released all slaves [ 1326.468281][T16426] bond3 (unregistering): Released all slaves [ 1326.550726][T16426] bond4 (unregistering): (slave bond5): Releasing active interface [ 1326.637103][T16426] bond4 (unregistering): Released all slaves [ 1326.662897][T16426] bond5 (unregistering): Released all slaves [ 1326.683135][T16426] bond6 (unregistering): Released all slaves [ 1326.800286][T16426] bond7 (unregistering): (slave bond8): Releasing active interface [ 1326.821813][T16426] bond7 (unregistering): Released all slaves [ 1326.843504][T16426] bond8 (unregistering): Released all slaves [ 1326.868841][T16426] bond9 (unregistering): Released all slaves [ 1326.892827][T16426] bond10 (unregistering): Released all slaves [ 1326.931099][T16426] bond11 (unregistering): Released all slaves [ 1326.968950][T16426] bond12 (unregistering): Released all slaves [ 1327.044035][T16426] bond13 (unregistering): Released all slaves [ 1327.089234][T16426] bond14 (unregistering): Released all slaves [ 1327.112982][T16426] bond15 (unregistering): Released all slaves [ 1327.155976][T16426] bond16 (unregistering): Released all slaves [ 1327.176666][T16426] bond17 (unregistering): Released all slaves [ 1327.275459][T22749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.282724][T22749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.310005][T22749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.351475][T22821] syzkaller0: entered promiscuous mode [ 1327.361980][T22821] syzkaller0: entered allmulticast mode [ 1327.817928][T16426] tipc: Disabling bearer [ 1327.823874][T16426] tipc: Left network mode [ 1327.855957][T22749] hsr_slave_0: entered promiscuous mode [ 1327.866203][T22749] hsr_slave_1: entered promiscuous mode [ 1327.874945][T22749] debugfs: 'hsr0' already exists in 'hsr' [ 1327.881058][T22749] Cannot create hsr debugfs directory [ 1328.220776][T22844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6284'. [ 1328.251314][ T5801] Bluetooth: hci3: command tx timeout [ 1328.557257][T22848] bond1: entered promiscuous mode [ 1328.608692][T22848] bond1 (unregistering): Released all slaves [ 1328.850673][T16426] hsr_slave_0: left promiscuous mode [ 1328.870128][T16426] hsr_slave_1: left promiscuous mode [ 1330.332844][ T5801] Bluetooth: hci3: command tx timeout [ 1331.285489][T22749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1331.371863][T22749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1331.450807][T22749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1331.563493][T22749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1332.207610][T22883] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6301'. [ 1332.454452][T22885] bond1: entered promiscuous mode [ 1332.565787][T22885] bond1 (unregistering): Released all slaves [ 1332.847273][T22749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.988372][T22749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.072507][T16411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.080063][T16411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.170508][T16411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.178024][T16411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.304409][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6312'. [ 1334.553928][T22749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.878432][T22749] veth0_vlan: entered promiscuous mode [ 1335.002006][T22749] veth1_vlan: entered promiscuous mode [ 1335.490761][T22749] veth0_macvtap: entered promiscuous mode [ 1335.556245][T22749] veth1_macvtap: entered promiscuous mode [ 1335.621113][T22749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.682329][T22749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.782302][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.810122][T16411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.820267][T16411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.889866][T16411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.995806][T22954] loop5: detected capacity change from 0 to 1024 [ 1337.013929][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1337.014008][ T30] audit: type=1326 audit(1764653521.946:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.068860][T22954] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1337.080597][T22954] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1337.100227][ T30] audit: type=1326 audit(1764653521.986:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.124167][ T30] audit: type=1326 audit(1764653521.986:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.147116][ T30] audit: type=1326 audit(1764653521.996:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.169972][ T30] audit: type=1326 audit(1764653521.996:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.195055][ T30] audit: type=1326 audit(1764653521.996:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.218614][ T30] audit: type=1326 audit(1764653521.996:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.241365][ T30] audit: type=1326 audit(1764653521.996:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.264137][ T30] audit: type=1326 audit(1764653522.006:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.286723][ T30] audit: type=1326 audit(1764653522.156:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22953 comm="syz.7.6325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1337.379577][T22954] JBD2: no valid journal superblock found [ 1337.385648][T22954] EXT4-fs (loop5): Could not load journal inode [ 1340.190688][T16426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.199291][T16426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.335821][T16426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.344854][T16426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.872863][T23010] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1341.258888][T23015] netlink: 'syz.2.6345': attribute type 10 has an invalid length. [ 1341.294546][T23015] team0: Port device dummy0 added [ 1341.327011][T23015] netlink: 'syz.2.6345': attribute type 10 has an invalid length. [ 1341.406584][T23015] team0: Port device dummy0 removed [ 1341.452152][T23019] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6346'. [ 1342.995924][T23047] netdevsim0: mtu less than device minimum [ 1343.018686][T23048] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1343.075140][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1343.075214][ T30] audit: type=1326 audit(1764653528.006:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.190946][ T30] audit: type=1326 audit(1764653528.036:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.214438][ T30] audit: type=1326 audit(1764653528.036:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.237325][ T30] audit: type=1326 audit(1764653528.046:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.263530][ T30] audit: type=1326 audit(1764653528.046:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.287242][ T30] audit: type=1326 audit(1764653528.046:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.309775][ T30] audit: type=1326 audit(1764653528.046:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.332379][ T30] audit: type=1326 audit(1764653528.046:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.358931][ T30] audit: type=1326 audit(1764653528.056:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.383271][ T30] audit: type=1326 audit(1764653528.056:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23049 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1343.507877][T23054] loop5: detected capacity change from 0 to 128 [ 1343.676197][T23061] netlink: 'syz.2.6365': attribute type 4 has an invalid length. [ 1343.687717][T23054] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.723497][T23054] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.780964][T23054] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.6363: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1343.855054][T23054] EXT4-fs (loop5): Remounting filesystem read-only [ 1344.111803][T18397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.125803][T23067] loop0: detected capacity change from 0 to 512 [ 1344.158768][T23067] ext4: Unknown parameter 'obj_user' [ 1346.292331][T23106] loop0: detected capacity change from 0 to 256 [ 1346.428400][T23110] loop5: detected capacity change from 0 to 164 [ 1346.516613][T23110] syz.5.6389: attempt to access beyond end of device [ 1346.516613][T23110] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1346.531541][T23110] syz.5.6389: attempt to access beyond end of device [ 1346.531541][T23110] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1347.747029][T23126] bridge_slave_0: left allmulticast mode [ 1347.753172][T23126] bridge_slave_0: left promiscuous mode [ 1347.760002][T23126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.867042][T23130] loop5: detected capacity change from 0 to 128 [ 1347.880123][T23126] bridge_slave_1: left allmulticast mode [ 1347.886716][T23126] bridge_slave_1: left promiscuous mode [ 1347.893569][T23126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.972311][T23126] team0: Port device team_slave_0 removed [ 1347.995366][T23130] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1348.013901][T23126] team0: Port device team_slave_1 removed [ 1348.026272][T23126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.034433][T23126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.045968][T23130] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.084739][T23126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.092013][T23130] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.6396: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1348.092952][T23126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.133311][T23126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1348.134336][T23130] EXT4-fs (loop5): Remounting filesystem read-only [ 1348.193832][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1348.193912][ T30] audit: type=1326 audit(1764653533.116:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.0.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1348.212978][T23101] bridge0: entered promiscuous mode [ 1348.224257][ T30] audit: type=1326 audit(1764653533.116:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.0.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1348.229658][T23101] macsec1: entered promiscuous mode [ 1348.264905][T23101] bridge0: port 3(macsec1) entered blocking state [ 1348.272052][T23101] bridge0: port 3(macsec1) entered disabled state [ 1348.279472][T23101] macsec1: entered allmulticast mode [ 1348.285502][T23101] bridge0: entered allmulticast mode [ 1348.335004][T23101] macsec1: left allmulticast mode [ 1348.340621][T23101] bridge0: left allmulticast mode [ 1348.401501][T23101] bridge0: left promiscuous mode [ 1348.639882][T18397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1349.591891][ T30] audit: type=1326 audit(1764653534.516:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.615930][ T30] audit: type=1326 audit(1764653534.526:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.639211][ T30] audit: type=1326 audit(1764653534.526:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.708143][ T30] audit: type=1326 audit(1764653534.596:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.730901][ T30] audit: type=1326 audit(1764653534.596:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.754466][ T30] audit: type=1326 audit(1764653534.596:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.777009][ T30] audit: type=1326 audit(1764653534.606:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1349.803567][ T30] audit: type=1326 audit(1764653534.606:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23154 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1350.159496][T23163] loop0: detected capacity change from 0 to 512 [ 1350.200974][T23163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1350.243280][T23163] EXT4-fs (loop0): 1 truncate cleaned up [ 1350.252394][T23163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1350.843974][T23177] netlink: 'syz.6.6412': attribute type 10 has an invalid length. [ 1350.914864][T23180] netlink: 'syz.6.6412': attribute type 10 has an invalid length. [ 1350.951187][T23177] team0: Port device dummy0 added [ 1350.977559][T22749] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.026277][T23180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1351.057284][T23180] team0: Failed to send options change via netlink (err -105) [ 1351.066187][T23180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1351.076932][T23180] team0: Port device dummy0 removed [ 1351.097472][T23180] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1352.076800][T23200] loop0: detected capacity change from 0 to 512 [ 1352.260446][T23200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.273606][T23200] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.451121][T23200] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.6421: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1352.520146][T23200] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.6421: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1352.596771][T23200] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.6421: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1352.651192][T23200] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.6421: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1352.687785][T23200] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.6421: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1352.773061][T23200] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.6421: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1353.107023][T22749] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.271208][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 1353.271288][ T30] audit: type=1326 audit(1764653538.196:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.357852][ T30] audit: type=1326 audit(1764653538.246:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.384363][ T30] audit: type=1326 audit(1764653538.246:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.408289][ T30] audit: type=1326 audit(1764653538.256:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.431031][ T30] audit: type=1326 audit(1764653538.256:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.453553][ T30] audit: type=1326 audit(1764653538.266:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.479365][ T30] audit: type=1326 audit(1764653538.266:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.502949][ T30] audit: type=1326 audit(1764653538.266:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.525844][ T30] audit: type=1326 audit(1764653538.266:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.548555][ T30] audit: type=1326 audit(1764653538.276:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23216 comm="syz.6.6427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1353.841219][T23223] loop5: detected capacity change from 0 to 128 [ 1353.865070][T23223] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1353.903580][T23223] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.008210][T23223] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.6431: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1354.059456][T23223] EXT4-fs (loop5): Remounting filesystem read-only [ 1354.324655][T18397] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1355.647468][T23254] loop0: detected capacity change from 0 to 512 [ 1355.711767][T23254] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6443: inode has both inline data and extents flags [ 1355.772645][T23254] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6443: couldn't read orphan inode 15 (err -117) [ 1355.838025][T23254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.171085][T22749] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.315969][T10704] kernel write not supported for file /input/event2 (pid: 10704 comm: kworker/0:0) [ 1356.451455][T23240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6437'. [ 1356.460946][T23240] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1357.050348][T23275] tipc: Started in network mode [ 1357.056446][T23275] tipc: Node identity ac1414aa, cluster identity 4711 [ 1357.065857][T23275] tipc: Enabled bearer , priority 10 [ 1357.560681][T23283] loop0: detected capacity change from 0 to 1024 [ 1357.630652][T23283] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1357.642343][T23283] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1357.678556][T23283] JBD2: no valid journal superblock found [ 1357.684843][T23283] EXT4-fs (loop0): Could not load journal inode [ 1358.180416][ T24] tipc: Node number set to 2886997162 [ 1358.855369][T23303] tipc: Enabling of bearer rejected, already enabled [ 1359.390253][T23312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6469'. [ 1359.400514][T23312] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1360.582009][T23330] tipc: Enabling of bearer rejected, already enabled [ 1361.107931][T23338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6482'. [ 1361.117563][T23338] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1361.416836][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1361.465779][T23345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1362.501976][T23360] tipc: Started in network mode [ 1362.507417][T23360] tipc: Node identity ac1414aa, cluster identity 4711 [ 1362.516812][T23360] tipc: Enabled bearer , priority 10 [ 1362.868879][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6497'. [ 1362.878608][T23368] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1363.437637][T23371] loop0: detected capacity change from 0 to 8192 [ 1363.629690][T10704] tipc: Node number set to 2886997162 [ 1364.360590][T23398] tipc: Started in network mode [ 1364.366450][T23398] tipc: Node identity ac1414aa, cluster identity 4711 [ 1364.375229][T23398] tipc: Enabling of bearer rejected, failed to enable media [ 1364.639252][T23403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6512'. [ 1364.648678][T23403] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1364.757979][T23404] veth0: entered promiscuous mode [ 1364.801753][T23404] veth0: left promiscuous mode [ 1364.822084][T23406] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6514'. [ 1365.608593][T23410] loop0: detected capacity change from 0 to 8192 [ 1365.680788][T23420] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6521'. [ 1366.594117][T23432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6526'. [ 1366.603810][T23432] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1366.665371][T23431] tipc: Enabling of bearer rejected, failed to enable media [ 1369.215558][T23466] tipc: Enabling of bearer rejected, already enabled [ 1369.253221][T23468] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6539'. [ 1369.262762][T23468] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1369.765619][T23475] loop0: detected capacity change from 0 to 512 [ 1369.885442][T23475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6054e01c, mo2=0102] [ 1369.923323][T23475] System zones: 1-12 [ 1369.931055][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1369.931133][ T30] audit: type=1326 audit(1764653554.866:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1369.964940][ T30] audit: type=1326 audit(1764653554.866:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.013928][T23475] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6541: inode has both inline data and extents flags [ 1370.101524][T23475] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6541: couldn't read orphan inode 15 (err -117) [ 1370.141614][T23475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.239504][ T30] audit: type=1326 audit(1764653554.966:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.265913][ T30] audit: type=1326 audit(1764653554.976:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.290143][ T30] audit: type=1326 audit(1764653554.976:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.313438][ T30] audit: type=1326 audit(1764653554.976:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.336439][ T30] audit: type=1326 audit(1764653554.976:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.359302][ T30] audit: type=1326 audit(1764653554.976:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.381988][ T30] audit: type=1326 audit(1764653555.006:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.407919][ T30] audit: type=1326 audit(1764653555.006:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23476 comm="syz.2.6543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1370.581482][T22749] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.919734][T23486] lo speed is unknown, defaulting to 1000 [ 1370.930009][T23486] lo speed is unknown, defaulting to 1000 [ 1370.936995][T23486] lo speed is unknown, defaulting to 1000 [ 1371.360103][T23486] infiniband sz1: set active [ 1371.365008][T23486] infiniband sz1: added lo [ 1371.400985][T10704] lo speed is unknown, defaulting to 1000 [ 1371.498189][T23486] RDS/IB: sz1: added [ 1371.502627][T23486] smc: adding ib device sz1 with port count 1 [ 1371.509202][T23486] smc: ib device sz1 port 1 has no pnetid [ 1371.517037][T23486] lo speed is unknown, defaulting to 1000 [ 1371.961582][T23486] lo speed is unknown, defaulting to 1000 [ 1371.975285][T23494] tipc: Enabling of bearer rejected, failed to enable media [ 1372.171396][T23498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6552'. [ 1372.180905][T23498] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1372.405220][T23486] lo speed is unknown, defaulting to 1000 [ 1372.851807][T23486] lo speed is unknown, defaulting to 1000 [ 1373.294871][T23486] lo speed is unknown, defaulting to 1000 [ 1373.468720][T10704] lo speed is unknown, defaulting to 1000 [ 1373.841564][T23506] lo speed is unknown, defaulting to 1000 [ 1376.704028][T23531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1376.718019][T23531] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1377.019594][T23535] tipc: Enabling of bearer rejected, already enabled [ 1377.391343][T23540] 9pnet_fd: Insufficient options for proto=fd [ 1377.705034][T23547] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6573'. [ 1378.207062][T23560] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6579'. [ 1378.216433][T23560] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1378.549257][T23553] loop5: detected capacity change from 0 to 8192 [ 1378.606462][T23564] tipc: Enabling of bearer rejected, already enabled [ 1378.664582][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1378.664669][ T30] audit: type=1800 audit(1764653563.586:7561): pid=23553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6576" name="file2" dev="loop5" ino=1048711 res=0 errno=0 [ 1378.908232][T23568] lo speed is unknown, defaulting to 1000 [ 1379.723920][T23575] loop5: detected capacity change from 0 to 764 [ 1379.798333][ T30] audit: type=1800 audit(1764653564.726:7562): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6584" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1379.868207][T23575] Symlink component flag not implemented [ 1379.874430][T23575] Symlink component flag not implemented (129) [ 1379.894168][T16411] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.925201][T23575] rock: directory entry would overflow storage [ 1379.932126][T23575] rock: sig=0x4f50, size=4, remaining=3 [ 1379.938517][T23575] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1380.041303][T16411] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.154790][T16411] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.294175][T16411] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.555481][T16411] bridge_slave_1: left allmulticast mode [ 1380.561629][T16411] bridge_slave_1: left promiscuous mode [ 1380.568272][T16411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.586059][T16411] bridge_slave_0: left allmulticast mode [ 1380.592246][T16411] bridge_slave_0: left promiscuous mode [ 1380.598804][T16411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.040719][T16411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.080765][T16411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.097869][T16411] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1381.129744][T16411] bond0 (unregistering): Released all slaves [ 1381.247553][T16411] tipc: Disabling bearer [ 1381.253633][T16411] tipc: Left network mode [ 1382.153966][T16411] hsr_slave_0: left promiscuous mode [ 1382.162350][T16411] hsr_slave_1: left promiscuous mode [ 1382.170354][T16411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.177997][T16411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.221886][T16411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.229779][T16411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.290087][T16411] veth1_macvtap: left promiscuous mode [ 1382.295895][T16411] veth0_macvtap: left promiscuous mode [ 1382.301894][T16411] veth1_vlan: left promiscuous mode [ 1382.307400][T16411] veth0_vlan: left promiscuous mode [ 1382.561159][T23594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1382.571457][T23594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1382.583192][T23594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1382.600809][T23594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1382.612610][T23594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1383.233375][T16411] team0 (unregistering): Port device team_slave_1 removed [ 1383.303957][T16411] team0 (unregistering): Port device team_slave_0 removed [ 1383.694408][T23593] tipc: Enabling of bearer rejected, failed to enable media [ 1383.764427][T23603] syzkaller0: entered promiscuous mode [ 1383.772950][T23603] syzkaller0: entered allmulticast mode [ 1383.844484][T23591] lo speed is unknown, defaulting to 1000 [ 1384.658451][ T5801] Bluetooth: hci4: command tx timeout [ 1384.970693][T23591] chnl_net:caif_netlink_parms(): no params data found [ 1385.428695][T23634] loop5: detected capacity change from 0 to 764 [ 1385.602703][T23634] Symlink component flag not implemented [ 1385.608786][T23634] Symlink component flag not implemented (129) [ 1385.618778][ T30] audit: type=1800 audit(1764653570.526:7563): pid=23634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6602" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1385.662316][T23634] rock: directory entry would overflow storage [ 1385.668731][T23634] rock: sig=0x4f50, size=4, remaining=3 [ 1385.674770][T23634] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1386.346078][T23653] capability: warning: `syz.7.6608' uses deprecated v2 capabilities in a way that may be insecure [ 1386.520764][T23591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.528275][T23591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.536134][T23591] bridge_slave_0: entered allmulticast mode [ 1386.549804][T23591] bridge_slave_0: entered promiscuous mode [ 1386.585852][T23654] loop0: detected capacity change from 0 to 2048 [ 1386.611698][T23591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.619475][T23591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.627830][T23591] bridge_slave_1: entered allmulticast mode [ 1386.637331][T23591] bridge_slave_1: entered promiscuous mode [ 1386.730533][ T5801] Bluetooth: hci4: command tx timeout [ 1386.837191][T23591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.867506][T23657] tipc: Enabling of bearer rejected, already enabled [ 1386.877900][T23654] loop0: p2 p3 p7 [ 1386.891080][T23591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.912068][T23658] syzkaller0: entered promiscuous mode [ 1386.917745][T23658] syzkaller0: entered allmulticast mode [ 1387.121223][T23591] team0: Port device team_slave_0 added [ 1387.171649][T23591] team0: Port device team_slave_1 added [ 1387.325239][T23591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.333470][T23591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.360337][T23591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.415838][ T30] audit: type=1326 audit(1764653572.306:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.439032][ T30] audit: type=1326 audit(1764653572.306:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.443865][T23591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.461781][ T30] audit: type=1326 audit(1764653572.306:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.469972][T23591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.470113][T23591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.531703][ T30] audit: type=1326 audit(1764653572.306:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.555032][ T30] audit: type=1326 audit(1764653572.316:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.579797][ T30] audit: type=1326 audit(1764653572.316:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.603326][ T30] audit: type=1326 audit(1764653572.466:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.626085][ T30] audit: type=1326 audit(1764653572.466:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.648703][ T30] audit: type=1326 audit(1764653572.496:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.7.6612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1387.840828][T23591] hsr_slave_0: entered promiscuous mode [ 1387.851023][T23591] hsr_slave_1: entered promiscuous mode [ 1387.859899][T23591] debugfs: 'hsr0' already exists in 'hsr' [ 1387.865806][T23591] Cannot create hsr debugfs directory [ 1388.822176][ T5801] Bluetooth: hci4: command tx timeout [ 1388.870861][T23591] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1388.894878][T23591] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1388.921191][T23591] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1388.944213][T23591] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1388.995520][T23676] loop0: detected capacity change from 0 to 764 [ 1389.101376][T23676] Symlink component flag not implemented [ 1389.108583][T23676] Symlink component flag not implemented (129) [ 1389.192321][T23676] rock: directory entry would overflow storage [ 1389.198840][T23676] rock: sig=0x4f50, size=4, remaining=3 [ 1389.205475][T23676] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1389.762093][T23687] 9pnet: Could not find request transport: r [ 1389.764203][T23591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.831240][T23690] tipc: Enabling of bearer rejected, already enabled [ 1389.921440][T23591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.025015][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.032616][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.144956][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.152573][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.304972][T23694] syzkaller0: entered promiscuous mode [ 1390.310808][T23694] syzkaller0: entered allmulticast mode [ 1390.427858][T23696] macsec0: entered promiscuous mode [ 1390.433457][T23696] bridge0: entered promiscuous mode [ 1390.445431][T23696] bridge0: port 3(macsec0) entered blocking state [ 1390.452457][T23696] bridge0: port 3(macsec0) entered disabled state [ 1390.459683][T23696] macsec0: entered allmulticast mode [ 1390.465257][T23696] bridge0: entered allmulticast mode [ 1390.482163][T23696] macsec0: left allmulticast mode [ 1390.487492][T23696] bridge0: left allmulticast mode [ 1390.507542][T23696] bridge0: left promiscuous mode [ 1390.892389][ T5801] Bluetooth: hci4: command tx timeout [ 1390.921667][T23705] loop0: detected capacity change from 0 to 128 [ 1391.006724][T23705] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1391.083725][T23705] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.121118][T23705] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.0.6628: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1391.177527][T23705] EXT4-fs (loop0): Remounting filesystem read-only [ 1391.367876][T22749] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1391.514077][T23591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.389782][T23732] tipc: Enabling of bearer rejected, already enabled [ 1393.081714][T23743] loop0: detected capacity change from 0 to 128 [ 1393.104910][T23591] veth0_vlan: entered promiscuous mode [ 1393.170134][T23743] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1393.204208][T23591] veth1_vlan: entered promiscuous mode [ 1393.230249][T23743] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.307907][T23743] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.0.6642: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1393.332505][T23591] veth0_macvtap: entered promiscuous mode [ 1393.365008][T23591] veth1_macvtap: entered promiscuous mode [ 1393.385928][T23743] EXT4-fs (loop0): Remounting filesystem read-only [ 1393.514587][T23591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.573521][T23591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.625857][T22749] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1393.674361][T16412] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.701027][T16412] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.761901][T16412] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.821821][T16412] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.384218][T23767] tipc: Enabling of bearer rejected, already enabled [ 1394.703135][T23774] tipc: Enabled bearer , priority 0 [ 1394.741486][T23774] syzkaller0: entered promiscuous mode [ 1394.747154][T23774] syzkaller0: entered allmulticast mode [ 1394.801690][T23774] tipc: Resetting bearer [ 1394.842076][T23773] tipc: Resetting bearer [ 1394.884002][T23773] tipc: Disabling bearer [ 1395.283052][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1396.301818][T23806] tipc: Enabling of bearer rejected, already enabled [ 1396.790680][T23818] lo speed is unknown, defaulting to 1000 [ 1397.929856][T16412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.937877][T16412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.055313][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.063598][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.614196][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6676'. [ 1398.853976][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1398.854060][ T30] audit: type=1326 audit(1764653583.776:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1398.883735][ T30] audit: type=1326 audit(1764653583.786:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1398.906946][ T30] audit: type=1326 audit(1764653583.786:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1398.930127][ T30] audit: type=1326 audit(1764653583.786:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1398.952700][ T30] audit: type=1326 audit(1764653583.796:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1398.977229][ T30] audit: type=1326 audit(1764653583.816:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1399.000746][ T30] audit: type=1326 audit(1764653583.816:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1399.023344][ T30] audit: type=1326 audit(1764653583.886:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1399.047908][ T30] audit: type=1326 audit(1764653583.956:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1399.071696][ T30] audit: type=1326 audit(1764653583.956:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23843 comm="syz.2.6678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1399.405490][T23849] tipc: Enabling of bearer rejected, already enabled [ 1400.594653][T23859] loop0: detected capacity change from 0 to 8192 [ 1401.183937][T23876] syzkaller0: entered promiscuous mode [ 1401.194600][T23876] syzkaller0: entered allmulticast mode [ 1401.569952][T23881] tipc: Enabling of bearer rejected, already enabled [ 1402.952357][T23906] netlink: 'syz.7.6706': attribute type 1 has an invalid length. [ 1403.017923][T23906] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1403.137992][T23906] bond15: entered promiscuous mode [ 1403.152066][T23906] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1403.170052][T23906] bond14: (slave bond15): Enslaving as an active interface with a down link [ 1403.261951][T23906] macvlan2: entered promiscuous mode [ 1403.267869][T23906] macvlan2: entered allmulticast mode [ 1403.277910][T23906] bond14: entered promiscuous mode [ 1403.287868][T23906] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1403.302094][T23906] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1403.358504][T23906] bond14: left promiscuous mode [ 1403.546646][T23913] tipc: Enabling of bearer rejected, already enabled [ 1403.672385][T23917] loop0: detected capacity change from 0 to 512 [ 1403.738129][T23917] EXT4-fs (loop0): too many log groups per flexible block group [ 1403.751317][T23917] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 1403.779812][T23917] EXT4-fs (loop0): mount failed [ 1404.136671][T23924] loop5: detected capacity change from 0 to 1024 [ 1404.182782][T23924] EXT4-fs: Ignoring removed orlov option [ 1404.307156][T23924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1404.357945][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1404.358022][ T30] audit: type=1800 audit(1764653589.286:7602): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6712" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1404.491235][ T30] audit: type=1804 audit(1764653589.356:7603): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6712" name="/newroot/415/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 1404.547862][T23935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1405.086451][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.290592][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6720'. [ 1405.299974][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6720'. [ 1405.555545][T23949] tipc: Enabling of bearer rejected, failed to enable media [ 1405.581202][T23953] netlink: 'syz.0.6723': attribute type 1 has an invalid length. [ 1405.664952][T23953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1405.813962][T23953] bond2: entered promiscuous mode [ 1405.827040][T23953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1405.844284][T23953] bond1: (slave bond2): Enslaving as an active interface with a down link [ 1405.916180][T23957] macvlan2: entered promiscuous mode [ 1405.922453][T23957] macvlan2: entered allmulticast mode [ 1405.934040][T23957] bond1: entered promiscuous mode [ 1405.942737][T23957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1405.954080][T23957] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1405.989904][ T30] audit: type=1800 audit(1764653590.846:7604): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6724" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1406.032498][T23957] bond1: left promiscuous mode [ 1406.630106][T23972] syzkaller0: entered promiscuous mode [ 1406.636592][T23972] syzkaller0: entered allmulticast mode [ 1407.258248][ T1144] Bluetooth: hci5: Frame reassembly failed (-84) [ 1407.375079][T23985] tipc: Enabling of bearer rejected, already enabled [ 1407.999181][ T30] audit: type=1800 audit(1764653592.926:7605): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6738" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1408.534046][T23999] netlink: 'syz.7.6740': attribute type 1 has an invalid length. [ 1408.626536][T23999] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1408.675734][T24004] loop5: detected capacity change from 0 to 1764 [ 1408.775389][T23999] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1408.786979][T23999] bond16: (slave vxcan11): The slave device specified does not support setting the MAC address [ 1408.803807][T23999] bond16: (slave vxcan11): Error -95 calling set_mac_address [ 1408.911665][T24006] bond17: entered promiscuous mode [ 1408.943654][T24007] macvlan2: entered promiscuous mode [ 1408.949795][T24007] macvlan2: entered allmulticast mode [ 1408.960015][T24007] bond16: entered promiscuous mode [ 1408.973393][T24007] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1408.987662][T24007] bond16: left promiscuous mode [ 1409.291462][T23594] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1409.297269][T23982] Bluetooth: hci5: command 0x1003 tx timeout [ 1409.307041][T23982] Bluetooth: hci0: command 0x0406 tx timeout [ 1409.329817][T23979] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1409.604876][T24015] syzkaller0: entered promiscuous mode [ 1409.611403][T24015] syzkaller0: entered allmulticast mode [ 1410.419457][ T30] audit: type=1800 audit(1764653595.346:7606): pid=24028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6751" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1410.668718][T24030] loop0: detected capacity change from 0 to 256 [ 1410.870930][T24037] netlink: 'syz.6.6755': attribute type 1 has an invalid length. [ 1411.002277][T24030] FAT-fs (loop0): Directory bread(block 64) failed [ 1411.010806][T24030] FAT-fs (loop0): Directory bread(block 65) failed [ 1411.021408][T24030] FAT-fs (loop0): Directory bread(block 66) failed [ 1411.028865][T24030] FAT-fs (loop0): Directory bread(block 67) failed [ 1411.038015][T24030] FAT-fs (loop0): Directory bread(block 68) failed [ 1411.046385][T24030] FAT-fs (loop0): Directory bread(block 69) failed [ 1411.054248][T24030] FAT-fs (loop0): Directory bread(block 70) failed [ 1411.062149][T24030] FAT-fs (loop0): Directory bread(block 71) failed [ 1411.071710][T24030] FAT-fs (loop0): Directory bread(block 72) failed [ 1411.079481][T24030] FAT-fs (loop0): Directory bread(block 73) failed [ 1411.151565][T24040] bond1: entered promiscuous mode [ 1411.196827][T24030] FAT-fs (loop0): Filesystem has been set read-only [ 1411.205920][ T30] audit: type=1800 audit(1764653596.136:7607): pid=24030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6752" name="cpu.stat" dev="loop0" ino=1048717 res=0 errno=0 [ 1411.369648][T23982] Bluetooth: hci0: command 0x0406 tx timeout [ 1411.377141][T24039] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1411.406803][T16412] Bluetooth: hci5: Frame reassembly failed (-84) [ 1412.659391][T24059] syzkaller0: entered promiscuous mode [ 1412.666104][T24059] syzkaller0: entered allmulticast mode [ 1413.150690][T24070] 9pnet_fd: Insufficient options for proto=fd [ 1413.161630][T24068] loop5: detected capacity change from 0 to 764 [ 1413.227865][ T30] audit: type=1800 audit(1764653598.156:7608): pid=24068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6765" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1413.370020][ T5801] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1413.454612][T23982] Bluetooth: hci0: command 0x0406 tx timeout [ 1413.767310][T24076] netlink: 'syz.6.6768': attribute type 1 has an invalid length. [ 1414.055994][T24080] loop5: detected capacity change from 0 to 1024 [ 1414.058673][T24079] bond2: entered promiscuous mode [ 1414.101420][T24082] macvlan2: entered promiscuous mode [ 1414.107483][T24082] macvlan2: entered allmulticast mode [ 1414.121882][T24080] EXT4-fs: Ignoring removed mblk_io_submit option [ 1414.140587][T24080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1414.213914][T24080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.586977][T24091] tipc: Enabling of bearer rejected, failed to enable media [ 1414.688653][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.007779][T24097] syzkaller0: entered promiscuous mode [ 1415.018584][T24097] syzkaller0: entered allmulticast mode [ 1415.304777][T24106] syzkaller0: entered promiscuous mode [ 1415.312147][T24106] syzkaller0: entered allmulticast mode [ 1415.639721][T24102] loop5: detected capacity change from 0 to 8192 [ 1415.668036][T16428] Bluetooth: hci5: Frame reassembly failed (-84) [ 1416.273536][T24121] netlink: 'syz.5.6785': attribute type 1 has an invalid length. [ 1416.385687][T24121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.515686][T24123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.525437][T24123] bond0: (slave vxcan11): The slave device specified does not support setting the MAC address [ 1416.542893][T24123] bond0: (slave vxcan11): Error -95 calling set_mac_address [ 1416.686242][T24129] tipc: Enabling of bearer rejected, failed to enable media [ 1416.787006][T24124] bond11: entered promiscuous mode [ 1416.863059][T24121] macvlan2: entered promiscuous mode [ 1416.872664][T24121] macvlan2: entered allmulticast mode [ 1416.882379][T24121] bond0: entered promiscuous mode [ 1416.890997][T24121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1416.906724][T24121] bond0: left promiscuous mode [ 1417.171984][T24135] syzkaller0: entered promiscuous mode [ 1417.181677][T24135] syzkaller0: entered allmulticast mode [ 1417.689999][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 1417.697438][T24011] Bluetooth: hci5: command 0x1003 tx timeout [ 1417.699471][T24110] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1417.705919][T23982] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1417.966021][T24151] syzkaller0: entered promiscuous mode [ 1417.972491][T24151] syzkaller0: entered allmulticast mode [ 1418.371682][T24155] tipc: Enabling of bearer rejected, already enabled [ 1418.797374][T24161] netlink: 'syz.7.6803': attribute type 1 has an invalid length. [ 1418.863404][T24161] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1419.014572][T24164] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1419.025210][T24164] bond18: (slave vxcan11): The slave device specified does not support setting the MAC address [ 1419.041559][T24164] bond18: (slave vxcan11): Error -95 calling set_mac_address [ 1419.395176][T24175] loop0: detected capacity change from 0 to 512 [ 1419.406606][T24161] bond19: entered promiscuous mode [ 1419.446715][T24166] macvlan2: entered promiscuous mode [ 1419.452388][T24166] macvlan2: entered allmulticast mode [ 1419.461106][T24166] bond18: entered promiscuous mode [ 1419.468760][T24166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1419.514044][T24175] EXT4-fs (loop0): too many log groups per flexible block group [ 1419.525398][T24175] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 1419.534480][T24175] EXT4-fs (loop0): mount failed [ 1419.547999][T24166] bond18: left promiscuous mode [ 1419.899848][T24172] syzkaller0: entered promiscuous mode [ 1419.905648][T24172] syzkaller0: entered allmulticast mode [ 1420.007134][ T1144] Bluetooth: hci5: Frame reassembly failed (-84) [ 1420.088156][T24194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1420.099560][T24194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1420.172819][T24194] loop0: detected capacity change from 0 to 512 [ 1420.187716][T24194] EXT4-fs: Ignoring removed i_version option [ 1420.194714][T24194] EXT4-fs: Ignoring removed bh option [ 1420.265238][T24194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.290631][T24194] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.628050][T22749] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.635374][T24202] tipc: Enabling of bearer rejected, already enabled [ 1420.723579][T24204] sd 0:0:1:0: device reset [ 1420.893865][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1421.232353][T24213] syzkaller0: entered promiscuous mode [ 1421.238130][T24213] syzkaller0: entered allmulticast mode [ 1422.009964][ T5801] Bluetooth: hci5: command 0x1003 tx timeout [ 1422.016420][T23982] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1422.070118][T24188] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1422.090756][T23982] Bluetooth: hci0: command 0x0406 tx timeout [ 1422.131998][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6828'. [ 1422.200233][T24231] tipc: Enabling of bearer rejected, already enabled [ 1422.398811][T24234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6829'. [ 1422.408434][T24234] openvswitch: netlink: Flow key attr not present in new flow. [ 1422.559859][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6830'. [ 1423.572166][T16412] Bluetooth: hci5: Frame reassembly failed (-84) [ 1423.636480][T24258] syzkaller0: entered promiscuous mode [ 1423.642383][T24258] syzkaller0: entered allmulticast mode [ 1423.675718][T24263] loop5: detected capacity change from 0 to 512 [ 1423.737600][T24263] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1423.754905][T24263] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.6842: bad orphan inode 13 [ 1423.793264][T24263] ext4_test_bit(bit=12, block=18) = 1 [ 1423.799167][T24263] is_bad_inode(inode)=0 [ 1423.803590][T24263] NEXT_ORPHAN(inode)=2130706432 [ 1423.808557][T24263] max_ino=32 [ 1423.811961][T24263] i_nlink=1 [ 1423.820549][T24263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1423.918569][T24263] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1424.035356][T24263] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1424.054166][T24271] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6842: bg 0: block 248: padding at end of block bitmap is not set [ 1424.160765][T24271] Quota error (device loop5): write_blk: dquota write failed [ 1424.168587][T24271] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1424.179804][T24271] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6842: Failed to acquire dquot type 1 [ 1424.541979][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.914653][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6846'. [ 1425.619672][T24259] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1425.635098][T23982] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1425.641072][T24011] Bluetooth: hci5: command 0x1003 tx timeout [ 1425.641724][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 1425.814674][T24295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6854'. [ 1426.528669][T24304] syzkaller0: entered promiscuous mode [ 1426.534539][T24304] syzkaller0: entered allmulticast mode [ 1427.255078][T24313] loop0: detected capacity change from 0 to 512 [ 1427.433108][T24313] EXT4-fs (loop0): too many log groups per flexible block group [ 1427.442495][T24313] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 1427.481556][T24313] EXT4-fs (loop0): mount failed [ 1427.920403][T24325] 9pnet_fd: Insufficient options for proto=fd [ 1427.953823][T16412] Bluetooth: hci5: Frame reassembly failed (-84) [ 1428.583386][T24337] ===================================================== [ 1428.590708][T24337] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 1428.598127][T24337] batadv_get_vid+0x2d0/0x3b0 [ 1428.603094][T24337] batadv_interface_tx+0x2e5/0x1e60 [ 1428.608453][T24337] dev_hard_start_xmit+0x22f/0xa30 [ 1428.613953][T24337] __dev_queue_xmit+0x3c51/0x5e60 [ 1428.619245][T24337] __bpf_redirect+0x162d/0x1760 [ 1428.624249][T24337] bpf_clone_redirect+0x366/0x530 [ 1428.629651][T24337] ___bpf_prog_run+0x1297/0xeba0 [ 1428.634756][T24337] __bpf_prog_run512+0xc5/0x100 [ 1428.639895][T24337] bpf_test_run+0x496/0xd80 [ 1428.644547][T24337] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 1428.650278][T24337] bpf_prog_test_run+0x5c2/0xa40 [ 1428.655395][T24337] __sys_bpf+0x873/0xeb0 [ 1428.659910][T24337] __ia32_sys_bpf+0xa4/0xf0 [ 1428.664545][T24337] ia32_sys_call+0xa53/0x4340 [ 1428.669563][T24337] __do_fast_syscall_32+0xb0/0x150 [ 1428.674851][T24337] do_fast_syscall_32+0x38/0x80 [ 1428.680163][T24337] do_SYSENTER_32+0x1f/0x30 [ 1428.684826][T24337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1428.691464][T24337] [ 1428.693878][T24337] Uninit was created at: [ 1428.698343][T24337] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 1428.704633][T24337] kmalloc_reserve+0x13c/0x4b0 [ 1428.709728][T24337] pskb_expand_head+0x1fc/0x1610 [ 1428.714824][T24337] skb_ensure_writable+0x44e/0x510 [ 1428.720285][T24337] bpf_clone_redirect+0x1c1/0x530 [ 1428.725461][T24337] ___bpf_prog_run+0x1297/0xeba0 [ 1428.730674][T24337] __bpf_prog_run512+0xc5/0x100 [ 1428.735718][T24337] bpf_test_run+0x496/0xd80 [ 1428.740506][T24337] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 1428.746117][T24337] bpf_prog_test_run+0x5c2/0xa40 [ 1428.751354][T24337] __sys_bpf+0x873/0xeb0 [ 1428.756010][T24337] __ia32_sys_bpf+0xa4/0xf0 [ 1428.760788][T24337] ia32_sys_call+0xa53/0x4340 [ 1428.765752][T24337] __do_fast_syscall_32+0xb0/0x150 [ 1428.771187][T24337] do_fast_syscall_32+0x38/0x80 [ 1428.776190][T24337] do_SYSENTER_32+0x1f/0x30 [ 1428.780989][T24337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1428.787493][T24337] [ 1428.790056][T24337] CPU: 0 UID: 0 PID: 24337 Comm: syz.0.6870 Tainted: G W syzkaller #0 PREEMPT(none) [ 1428.801315][T24337] Tainted: [W]=WARN [ 1428.805217][T24337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1428.815537][T24337] ===================================================== [ 1428.822723][T24337] Disabling lock debugging due to kernel taint [ 1428.829122][T24337] Kernel panic - not syncing: kmsan.panic set ... [ 1428.835655][T24337] CPU: 0 UID: 0 PID: 24337 Comm: syz.0.6870 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1428.846788][T24337] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1428.851905][T24337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1428.862064][T24337] Call Trace: [ 1428.865423][T24337] [ 1428.868420][T24337] __dump_stack+0x26/0x30 [ 1428.872944][T24337] dump_stack_lvl+0x53/0x270 [ 1428.877762][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1428.883908][T24337] dump_stack+0x1e/0x25 [ 1428.888191][T24337] vpanic+0x435/0xd30 [ 1428.892326][T24337] panic+0x15d/0x160 [ 1428.896407][T24337] kmsan_report+0x31c/0x320 [ 1428.901058][T24337] ? __msan_warning+0x1b/0x30 [ 1428.905859][T24337] ? batadv_get_vid+0x2d0/0x3b0 [ 1428.910854][T24337] ? batadv_interface_tx+0x2e5/0x1e60 [ 1428.916377][T24337] ? dev_hard_start_xmit+0x22f/0xa30 [ 1428.921787][T24337] ? __dev_queue_xmit+0x3c51/0x5e60 [ 1428.927126][T24337] ? __bpf_redirect+0x162d/0x1760 [ 1428.932282][T24337] ? bpf_clone_redirect+0x366/0x530 [ 1428.937620][T24337] ? ___bpf_prog_run+0x1297/0xeba0 [ 1428.942875][T24337] ? __bpf_prog_run512+0xc5/0x100 [ 1428.948036][T24337] ? bpf_test_run+0x496/0xd80 [ 1428.952829][T24337] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 1428.958600][T24337] ? bpf_prog_test_run+0x5c2/0xa40 [ 1428.963940][T24337] ? __sys_bpf+0x873/0xeb0 [ 1428.968496][T24337] ? __ia32_sys_bpf+0xa4/0xf0 [ 1428.973475][T24337] ? ia32_sys_call+0xa53/0x4340 [ 1428.978602][T24337] ? __do_fast_syscall_32+0xb0/0x150 [ 1428.984140][T24337] ? do_fast_syscall_32+0x38/0x80 [ 1428.989314][T24337] ? do_SYSENTER_32+0x1f/0x30 [ 1428.994136][T24337] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.000917][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.006888][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.012851][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.018109][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.024069][T24337] ? batadv_interface_tx+0x41/0x1e60 [ 1429.029598][T24337] ? filter_irq_stacks+0x49/0x190 [ 1429.034805][T24337] ? stack_depot_save_flags+0x35/0x7b0 [ 1429.040424][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.045705][T24337] __msan_warning+0x1b/0x30 [ 1429.050437][T24337] batadv_get_vid+0x2d0/0x3b0 [ 1429.055250][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.061220][T24337] batadv_interface_tx+0x2e5/0x1e60 [ 1429.066552][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.071923][T24337] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1429.078752][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.084319][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.090578][T24337] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1429.096458][T24337] dev_hard_start_xmit+0x22f/0xa30 [ 1429.101734][T24337] __dev_queue_xmit+0x3c51/0x5e60 [ 1429.106898][T24337] ? skb_release_data+0xa12/0xac0 [ 1429.112062][T24337] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1429.118646][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.123914][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.129875][T24337] ? __dev_queue_xmit+0x30c/0x5e60 [ 1429.135158][T24337] __bpf_redirect+0x162d/0x1760 [ 1429.140148][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.145417][T24337] bpf_clone_redirect+0x366/0x530 [ 1429.150609][T24337] ___bpf_prog_run+0x1297/0xeba0 [ 1429.155725][T24337] __bpf_prog_run512+0xc5/0x100 [ 1429.160735][T24337] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1429.167220][T24337] ? kmsan_internal_poison_memory+0x78/0x90 [ 1429.173273][T24337] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1429.179315][T24337] ? kmsan_slab_alloc+0xde/0x160 [ 1429.184392][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.189651][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.195634][T24337] ? bpf_test_run+0x21/0xd80 [ 1429.200352][T24337] ? filter_irq_stacks+0x49/0x190 [ 1429.205562][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.210831][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.216088][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.221341][T24337] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1429.227808][T24337] ? kmsan_get_metadata+0x150/0x160 [ 1429.233163][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.239139][T24337] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1429.244752][T24337] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1429.250374][T24337] bpf_test_run+0x496/0xd80 [ 1429.255006][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.260265][T24337] ? kmsan_get_metadata+0xfb/0x160 [ 1429.265543][T24337] ? bpf_test_run+0x2f7/0xd80 [ 1429.270359][T24337] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.276322][T24337] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 1429.282399][T24337] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1429.288449][T24337] bpf_prog_test_run+0x5c2/0xa40 [ 1429.293564][T24337] __sys_bpf+0x873/0xeb0 [ 1429.298075][T24337] __ia32_sys_bpf+0xa4/0xf0 [ 1429.302713][T24337] ia32_sys_call+0xa53/0x4340 [ 1429.307568][T24337] __do_fast_syscall_32+0xb0/0x150 [ 1429.312854][T24337] do_fast_syscall_32+0x38/0x80 [ 1429.317866][T24337] do_SYSENTER_32+0x1f/0x30 [ 1429.322505][T24337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.328985][T24337] RIP: 0023:0xf706d539 [ 1429.333153][T24337] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1429.352896][T24337] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1429.361455][T24337] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 1429.369536][T24337] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1429.377596][T24337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1429.385658][T24337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1429.393899][T24337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1429.402089][T24337] [ 1429.405590][T24337] Kernel Offset: disabled [ 1429.409966][T24337] Rebooting in 86400 seconds..