last executing test programs: 42.111396494s ago: executing program 2 (id=23): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x100, [{0xc, 0x2, 0x7b}, {0x4, 0x0, 0x6}]}, @enum64={0xf, 0xa, 0x0, 0x13, 0x0, 0xe, [{0x8, 0x4, 0x2400000}, {0x7, 0x8, 0x5}, {0xa, 0x8d2, 0xfffffff7}, {0x8, 0x100, 0xffff8000}, {0xe, 0x2, 0x5}, {0x4, 0x51, 0x6}, {0x8, 0x3, 0x8001}, {0x7, 0x9, 0x2}, {0x2, 0x0, 0x8000}, {0xb, 0x6, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x80000001}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30]}}, &(0x7f0000000280)=""/219, 0xde, 0xdb, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001100)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) r8 = syz_io_uring_setup(0x952, &(0x7f0000000240), &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000000)=r10, 0x1) readv(r10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0xff0b) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8008) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) 39.421518716s ago: executing program 2 (id=28): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e8", 0xdf}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1", 0x33}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d4", 0x9f}, {&(0x7f0000000040)}, {&(0x7f0000000740)}, {&(0x7f0000000200)}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 36.497655731s ago: executing program 2 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2, 0x1, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 36.168588781s ago: executing program 2 (id=36): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 35.044837713s ago: executing program 2 (id=39): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) unshare(0x40020480) 31.836264937s ago: executing program 2 (id=42): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) rt_sigqueueinfo(0x0, 0xd, &(0x7f00000004c0)={0x1c, 0x6, 0x8}) r5 = getgid() lchown(0x0, 0x0, r5) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000e80)={&(0x7f0000000dc0), 0x9, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") 16.123302576s ago: executing program 32 (id=42): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) rt_sigqueueinfo(0x0, 0xd, &(0x7f00000004c0)={0x1c, 0x6, 0x8}) r5 = getgid() lchown(0x0, 0x0, r5) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000e80)={&(0x7f0000000dc0), 0x9, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") 8.352586213s ago: executing program 4 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00', @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r9, 0x2000, 0x0) pread64(r8, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.873049493s ago: executing program 3 (id=88): socket(0x2, 0x3, 0x6) pipe(&(0x7f0000000700)) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 5.220967124s ago: executing program 4 (id=90): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 5.107422255s ago: executing program 0 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 5.008608921s ago: executing program 3 (id=92): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) fdatasync(0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 4.823227016s ago: executing program 0 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 3.375610042s ago: executing program 3 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) 3.024694007s ago: executing program 4 (id=95): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2, 0x1, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.005454952s ago: executing program 1 (id=96): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 2.726466881s ago: executing program 3 (id=97): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2001, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020301040000000000000000030001040800054000000015080001000200002c0800034000000b8008000340000000040800034000000006080005400000001908000440000000010800010004000010"], 0x54}}, 0x4040) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000180)="809db0373b154c413be00db8358dec1fe5ad6835f5e31a1b65f4e2f33d19e7941fb0d05815e51277f8fcf776eb750037fbcbfb52", 0x34, 0x20040001, &(0x7f0000000300)={0xa, 0x4e20, 0x5000, @remote, 0x6}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x150}}, 0x4010) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r9}, 0x18) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 2.726199249s ago: executing program 0 (id=98): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 2.725926497s ago: executing program 4 (id=99): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) mkdir(0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.608727945s ago: executing program 0 (id=100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000002300)=0x200) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 2.454667342s ago: executing program 0 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.296276301s ago: executing program 1 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 1.724777445s ago: executing program 4 (id=103): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) fdatasync(0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 1.607712859s ago: executing program 1 (id=104): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) 1.60023179s ago: executing program 3 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) close(r6) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) fcntl$dupfd(r1, 0x0, r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) 1.236746827s ago: executing program 0 (id=106): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 1.191284296s ago: executing program 1 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 375.057356ms ago: executing program 1 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) timer_delete(r2) 368.15511ms ago: executing program 4 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x3c, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x102) write$P9_RREMOVE(r6, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, 0x0, &(0x7f00000001c0)) 324.721691ms ago: executing program 3 (id=110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x0, 0x46b, &(0x7f00000014c0)="$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") 0s ago: executing program 1 (id=111): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a8", 0xb}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 83.835905][ T5821] cgroup: Unknown subsys name 'net' [ 84.033743][ T5821] cgroup: Unknown subsys name 'cpuset' [ 84.042930][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.793856][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.637390][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.650403][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.660725][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.668181][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.676222][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.680108][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.685083][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.696524][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.697715][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.706463][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.713318][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.721222][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.726654][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.734053][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.739723][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.747941][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.755772][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.770318][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.777636][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.791072][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.798974][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.808676][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.816121][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.817551][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.831162][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.487103][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.537525][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.660908][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.814705][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.822007][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.829723][ T5834] bridge_slave_0: entered allmulticast mode [ 89.837661][ T5834] bridge_slave_0: entered promiscuous mode [ 89.848289][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.856664][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.864644][ T5834] bridge_slave_1: entered allmulticast mode [ 89.872717][ T5834] bridge_slave_1: entered promiscuous mode [ 89.891596][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.943223][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.984738][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.044286][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.062715][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.070226][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.077523][ T5833] bridge_slave_0: entered allmulticast mode [ 90.085142][ T5833] bridge_slave_0: entered promiscuous mode [ 90.094137][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.101775][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.109161][ T5833] bridge_slave_1: entered allmulticast mode [ 90.117204][ T5833] bridge_slave_1: entered promiscuous mode [ 90.267495][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.274902][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.282434][ T5831] bridge_slave_0: entered allmulticast mode [ 90.290233][ T5831] bridge_slave_0: entered promiscuous mode [ 90.302031][ T5834] team0: Port device team_slave_0 added [ 90.316679][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.358409][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.366014][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.373658][ T5831] bridge_slave_1: entered allmulticast mode [ 90.381767][ T5831] bridge_slave_1: entered promiscuous mode [ 90.390973][ T5834] team0: Port device team_slave_1 added [ 90.413732][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.436402][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.443809][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.451137][ T5848] bridge_slave_0: entered allmulticast mode [ 90.458374][ T5848] bridge_slave_0: entered promiscuous mode [ 90.521677][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.528904][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.537422][ T5848] bridge_slave_1: entered allmulticast mode [ 90.545263][ T5848] bridge_slave_1: entered promiscuous mode [ 90.582971][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.590269][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.597421][ T5843] bridge_slave_0: entered allmulticast mode [ 90.605245][ T5843] bridge_slave_0: entered promiscuous mode [ 90.615209][ T5833] team0: Port device team_slave_0 added [ 90.624531][ T5833] team0: Port device team_slave_1 added [ 90.631379][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.638535][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.648469][ T5843] bridge_slave_1: entered allmulticast mode [ 90.656637][ T5843] bridge_slave_1: entered promiscuous mode [ 90.679193][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.693103][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.703401][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.710408][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.736850][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.749847][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.756826][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.783144][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.850116][ T51] Bluetooth: hci2: command tx timeout [ 90.850122][ T5847] Bluetooth: hci3: command tx timeout [ 90.850373][ T5847] Bluetooth: hci0: command tx timeout [ 90.881492][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.888459][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.915362][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.929510][ T5847] Bluetooth: hci1: command tx timeout [ 90.929890][ T5841] Bluetooth: hci4: command tx timeout [ 90.951626][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.964927][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.991628][ T5831] team0: Port device team_slave_0 added [ 91.000740][ T5831] team0: Port device team_slave_1 added [ 91.007927][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.015429][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.041838][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.055548][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.068986][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.167396][ T5848] team0: Port device team_slave_0 added [ 91.203490][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.210624][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.237134][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.252548][ T5843] team0: Port device team_slave_0 added [ 91.261821][ T5848] team0: Port device team_slave_1 added [ 91.269924][ T5843] team0: Port device team_slave_1 added [ 91.283415][ T5834] hsr_slave_0: entered promiscuous mode [ 91.290184][ T5834] hsr_slave_1: entered promiscuous mode [ 91.297276][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.304846][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.331050][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.477594][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.485092][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.511277][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.524123][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.531215][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.557816][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.590404][ T5833] hsr_slave_0: entered promiscuous mode [ 91.596764][ T5833] hsr_slave_1: entered promiscuous mode [ 91.603120][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.610953][ T5833] Cannot create hsr debugfs directory [ 91.617260][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.624966][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.651295][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.665405][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.672658][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.699214][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.743543][ T5831] hsr_slave_0: entered promiscuous mode [ 91.750144][ T5831] hsr_slave_1: entered promiscuous mode [ 91.756261][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.763889][ T5831] Cannot create hsr debugfs directory [ 91.929354][ T5843] hsr_slave_0: entered promiscuous mode [ 91.935907][ T5843] hsr_slave_1: entered promiscuous mode [ 91.942712][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.950688][ T5843] Cannot create hsr debugfs directory [ 91.972885][ T2152] cfg80211: failed to load regulatory.db [ 91.981025][ T5848] hsr_slave_0: entered promiscuous mode [ 91.994377][ T5848] hsr_slave_1: entered promiscuous mode [ 92.005330][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.013885][ T5848] Cannot create hsr debugfs directory [ 92.457883][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.485226][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.516942][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.555647][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.629650][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.645059][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.670938][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.681668][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.760899][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.787051][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.797653][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.813108][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.930754][ T5841] Bluetooth: hci2: command tx timeout [ 92.931784][ T5847] Bluetooth: hci3: command tx timeout [ 92.941753][ T5841] Bluetooth: hci0: command tx timeout [ 92.961912][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.995162][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.007926][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.014777][ T5847] Bluetooth: hci4: command tx timeout [ 93.019731][ T5847] Bluetooth: hci1: command tx timeout [ 93.029647][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.116702][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.146068][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.157877][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.182120][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.196754][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.223740][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.299139][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.325759][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.333077][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.344074][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.351357][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.372974][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.402696][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.409943][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.473742][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.498301][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.505513][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.555731][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.593952][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.678048][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.685330][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.727957][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.735175][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.755777][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.766522][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.886001][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.958361][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.965632][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.021849][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.064283][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.071490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.114099][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.121301][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.163268][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.170515][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.245600][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.348751][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.465515][ T5831] veth0_vlan: entered promiscuous mode [ 94.504489][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.536552][ T5831] veth1_vlan: entered promiscuous mode [ 94.664935][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.728010][ T5831] veth0_macvtap: entered promiscuous mode [ 94.811395][ T5831] veth1_macvtap: entered promiscuous mode [ 94.820492][ T5834] veth0_vlan: entered promiscuous mode [ 94.836032][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.887858][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.913442][ T5834] veth1_vlan: entered promiscuous mode [ 94.933641][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.985935][ T3514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.004630][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.012054][ T5847] Bluetooth: hci0: command tx timeout [ 95.012578][ T5841] Bluetooth: hci2: command tx timeout [ 95.017485][ T5847] Bluetooth: hci3: command tx timeout [ 95.050143][ T3514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084747][ T3514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.094649][ T5847] Bluetooth: hci1: command tx timeout [ 95.094659][ T5841] Bluetooth: hci4: command tx timeout [ 95.108548][ T3514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.138562][ T5834] veth0_macvtap: entered promiscuous mode [ 95.172696][ T5834] veth1_macvtap: entered promiscuous mode [ 95.207118][ T5848] veth0_vlan: entered promiscuous mode [ 95.254170][ T5848] veth1_vlan: entered promiscuous mode [ 95.308448][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.322498][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.340371][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.347953][ T5848] veth0_macvtap: entered promiscuous mode [ 95.348321][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.398631][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.420992][ T5843] veth0_vlan: entered promiscuous mode [ 95.428159][ T5848] veth1_macvtap: entered promiscuous mode [ 95.442415][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.453454][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.477957][ T3009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.495528][ T5843] veth1_vlan: entered promiscuous mode [ 95.499708][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.508955][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.564029][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.605869][ T5833] veth0_vlan: entered promiscuous mode [ 95.633329][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.654874][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.663747][ T5833] veth1_vlan: entered promiscuous mode [ 95.760215][ T3514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.811280][ T3514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.820904][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.821137][ T3514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.828750][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.267749][ T5843] veth0_macvtap: entered promiscuous mode [ 96.342030][ T3514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.708613][ T5843] veth1_macvtap: entered promiscuous mode [ 96.874487][ T5833] veth0_macvtap: entered promiscuous mode [ 96.888253][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.920929][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.956352][ T5833] veth1_macvtap: entered promiscuous mode [ 96.987646][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.045281][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.067488][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.091753][ T5847] Bluetooth: hci2: command tx timeout [ 97.091791][ T51] Bluetooth: hci0: command tx timeout [ 97.100547][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.103451][ T5841] Bluetooth: hci3: command tx timeout [ 97.161441][ T3514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.170126][ T5841] Bluetooth: hci4: command tx timeout [ 97.175582][ T51] Bluetooth: hci1: command tx timeout [ 97.272155][ T3514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.293197][ T3514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.322705][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.617715][ T3514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.736117][ T5961] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 98.600178][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.628946][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.692386][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.993260][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.387683][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.975102][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.260423][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.221183][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.255279][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.271965][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.267480][ T5978] ip6erspan0: entered allmulticast mode [ 102.354572][ T5980] loop3: detected capacity change from 0 to 1024 [ 102.362445][ T5980] EXT4-fs: Ignoring removed i_version option [ 102.390982][ T5980] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.410443][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.418293][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.538736][ T5980] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4: Invalid block bitmap block 0 in block_group 0 [ 102.556544][ T5980] Quota error (device loop3): write_blk: dquota write failed [ 102.564227][ T5980] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.574319][ T5980] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4: Failed to acquire dquot type 0 [ 102.587719][ T5980] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.613157][ T5980] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4: Invalid inode bitmap blk 0 in block_group 0 [ 102.629645][ T5980] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 102.640317][ T5980] EXT4-fs (loop3): 1 orphan inode deleted [ 102.647939][ T5980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.648786][ T30] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 102.741316][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.749164][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.769067][ T30] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 103.920083][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.978881][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.639735][ T6019] loop4: detected capacity change from 0 to 128 [ 108.257831][ T6009] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 108.299986][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.573574][ T5909] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 108.603846][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.642587][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.774844][ T6028] loop2: detected capacity change from 0 to 512 [ 108.788797][ T6028] ======================================================= [ 108.788797][ T6028] WARNING: The mand mount option has been deprecated and [ 108.788797][ T6028] and is ignored by this kernel. Remove the mand [ 108.788797][ T6028] option from the mount to silence this warning. [ 108.788797][ T6028] ======================================================= [ 108.913258][ T6028] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.934672][ T6028] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.16: bg 0: block 248: padding at end of block bitmap is not set [ 108.959344][ T6028] Quota error (device loop2): write_blk: dquota write failed [ 108.967446][ T6028] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.977814][ T6028] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.16: Failed to acquire dquot type 1 [ 109.017104][ T6028] EXT4-fs (loop2): 1 truncate cleaned up [ 109.049775][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.120864][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.752641][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.784565][ T6023] kworker/u8:11: attempt to access beyond end of device [ 109.784565][ T6023] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 109.880549][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.964485][ T6023] kworker/u8:11: attempt to access beyond end of device [ 109.964485][ T6023] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 110.032822][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.077518][ T6023] kworker/u8:11: attempt to access beyond end of device [ 110.077518][ T6023] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 110.115404][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.177208][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.208434][ T6023] kworker/u8:11: attempt to access beyond end of device [ 110.208434][ T6023] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 110.279892][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.345685][ T6023] kworker/u8:11: attempt to access beyond end of device [ 110.345685][ T6023] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 110.508937][ T6023] kworker/u8:11: attempt to access beyond end of device [ 110.508937][ T6023] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 110.679660][ T6023] kworker/u8:11: attempt to access beyond end of device [ 110.679660][ T6023] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 110.747204][ T5909] usb 1-1: unable to read config index 3 descriptor/start: -71 [ 110.826574][ T5909] usb 1-1: can't read configurations, error -71 [ 111.128631][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.257562][ T6023] kworker/u8:11: attempt to access beyond end of device [ 111.257562][ T6023] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 111.271837][ T6023] kworker/u8:11: attempt to access beyond end of device [ 111.271837][ T6023] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 111.285837][ T6023] kworker/u8:11: attempt to access beyond end of device [ 111.285837][ T6023] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 111.297185][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.315215][ T6034] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 111.556650][ T6041] loop1: detected capacity change from 0 to 512 [ 111.699547][ T6041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.030655][ T6041] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.20: invalid block [ 112.098195][ T6041] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.20: invalid indirect mapped block 4294967295 (level 1) [ 112.140722][ T6041] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.20: invalid indirect mapped block 4294967295 (level 1) [ 112.192264][ T6041] EXT4-fs (loop1): 2 truncates cleaned up [ 112.221215][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.198801][ T6044] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 113.264315][ T6039] loop3: detected capacity change from 0 to 16 [ 113.308510][ T6039] erofs (device loop3): mounted with root inode @ nid 36. [ 113.363981][ T6039] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 113.594511][ T6039] erofs (device loop3): read error -117 @ 43 of nid 36 [ 114.908826][ T6051] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 115.463649][ T6051] erofs (device loop3): read error -117 @ 43 of nid 36 [ 115.494913][ T6039] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 115.664890][ T6039] erofs (device loop3): read error -117 @ 43 of nid 36 [ 115.674083][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.705883][ T6050] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 115.777580][ T6050] erofs (device loop3): read error -117 @ 43 of nid 36 [ 115.824641][ T6051] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 115.909618][ T6051] erofs (device loop3): read error -117 @ 43 of nid 36 [ 118.574626][ T6070] loop1: detected capacity change from 0 to 1024 [ 118.663767][ T6070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.098974][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.222521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.527714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.529487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.529761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.515839][ T6086] tty tty29: ldisc open failed (-12), clearing slot 28 [ 121.367083][ T6091] loop4: detected capacity change from 0 to 512 [ 121.566313][ T6091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.588862][ T6091] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.616559][ T6091] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.32: iget: bad i_size value: 2533274857506816 [ 121.772727][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.456128][ T6105] loop2: detected capacity change from 0 to 1024 [ 122.488722][ T6105] EXT4-fs: Ignoring removed orlov option [ 122.567603][ T6105] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.645924][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.887014][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.893020][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.170551][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 124.193714][ T5836] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.212149][ T5836] usb 5-1: config 0 has no interface number 0 [ 124.226340][ T5836] usb 5-1: config 0 interface 184 has no altsetting 0 [ 124.247162][ T5836] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.264008][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.295929][ T5836] usb 5-1: Product: syz [ 124.313349][ T5836] usb 5-1: Manufacturer: syz [ 124.327149][ T5836] usb 5-1: SerialNumber: syz [ 124.356920][ T5836] usb 5-1: config 0 descriptor?? [ 124.404953][ T5836] smsc75xx v1.0.0 [ 125.006150][ T5836] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.041852][ T5836] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.841064][ T31] audit: type=1326 audit(1751388673.593:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 125.893408][ T31] audit: type=1326 audit(1751388673.623:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 125.935658][ T31] audit: type=1326 audit(1751388673.623:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 125.996173][ T31] audit: type=1326 audit(1751388673.623:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 126.083045][ T31] audit: type=1326 audit(1751388673.623:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 126.106143][ T31] audit: type=1326 audit(1751388673.623:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 126.128558][ T31] audit: type=1326 audit(1751388673.623:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91058e929 code=0x7ffc0000 [ 126.135021][ T5917] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 126.157173][ T31] audit: type=1326 audit(1751388673.623:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff91058d290 code=0x7ffc0000 [ 126.235692][ T31] audit: type=1326 audit(1751388673.623:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff91058e52b code=0x7ffc0000 [ 126.258574][ T31] audit: type=1326 audit(1751388673.623:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff91058e52b code=0x7ffc0000 [ 126.374284][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.411036][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.442631][ T5917] usb 4-1: string descriptor 0 read error: -22 [ 126.448981][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.481609][ T6137] loop2: detected capacity change from 0 to 512 [ 126.481961][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.624116][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.638708][ T6137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.847070][ T5836] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 127.917300][ T5836] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 127.985255][ T5836] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 128.055747][ T5836] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 128.083061][ T6137] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.42: invalid block [ 128.120628][ T5836] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 128.220489][ T5836] usb 5-1: USB disconnect, device number 2 [ 128.247353][ T6137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.42: invalid indirect mapped block 4294967295 (level 1) [ 128.519359][ T6137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.42: invalid indirect mapped block 4294967295 (level 1) [ 128.705169][ T5917] usb 4-1: USB disconnect, device number 2 [ 128.740409][ T6137] EXT4-fs (loop2): 2 truncates cleaned up [ 129.046193][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.878616][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x7 [ 131.133276][ T6162] loop3: detected capacity change from 0 to 512 [ 132.412765][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x3 [ 132.434472][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.451372][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.458818][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.469325][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.476767][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.484389][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.491850][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.499508][ T24] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 132.511783][ T24] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 132.609362][ T6145] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 133.533784][ T6171] fido_id[6171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.938561][ T6181] loop4: detected capacity change from 0 to 1024 [ 135.967481][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 136.172347][ T6185] xt_bpf: check failed: parse error [ 136.389902][ T6187] syz.0.53 (6187) used greatest stack depth: 15448 bytes left [ 137.219835][ T6194] loop4: detected capacity change from 0 to 512 [ 137.795173][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 138.065572][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.065716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.811387][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.865767][ T6194] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.135304][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.327591][ T6216] loop4: detected capacity change from 0 to 512 [ 141.912716][ T6213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.124364][ T6225] loop3: detected capacity change from 0 to 1024 [ 142.256620][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.355675][ T6225] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.633913][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.686840][ T6216] loop4: detected capacity change from 0 to 40427 [ 142.784861][ T6216] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 142.815592][ T6216] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.887027][ T6216] F2FS-fs (loop4): invalid crc value [ 143.266111][ T5957] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.633081][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 143.824216][ T6237] xt_CT: No such helper "netbios-ns" [ 143.955092][ T5957] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.979281][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.987326][ T5957] usb 4-1: Product: syz [ 144.009290][ T5957] usb 4-1: Manufacturer: syz [ 144.013938][ T5957] usb 4-1: SerialNumber: syz [ 144.117240][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.125996][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.134500][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.142876][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.154576][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.385272][ T5957] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 145.182129][ T5957] usb 4-1: USB disconnect, device number 3 [ 145.246031][ T5957] usblp0: removed [ 145.648317][ T6242] chnl_net:caif_netlink_parms(): no params data found [ 146.209709][ T51] Bluetooth: hci5: command tx timeout [ 147.233817][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.274058][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.296091][ T6242] bridge_slave_0: entered allmulticast mode [ 147.323336][ T6242] bridge_slave_0: entered promiscuous mode [ 147.441399][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.448678][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.478155][ T6242] bridge_slave_1: entered allmulticast mode [ 147.510568][ T6242] bridge_slave_1: entered promiscuous mode [ 147.510661][ T6136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.189163][ T6291] loop3: detected capacity change from 0 to 128 [ 148.202377][ T6291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.209112][ T6291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.310029][ T51] Bluetooth: hci5: command tx timeout [ 148.357460][ T6291] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.474253][ T6291] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.505248][ T6291] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.648365][ T6291] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 149.264406][ T6296] loop4: detected capacity change from 0 to 128 [ 149.793100][ T6298] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 150.085161][ T5957] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.133254][ T5848] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.140533][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.259302][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 150.267976][ T5957] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 150.276893][ T5957] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 150.319398][ T5957] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 150.328445][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.379090][ T5957] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.383112][ T51] Bluetooth: hci5: command tx timeout [ 150.429077][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.453479][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.570291][ T6308] loop4: detected capacity change from 0 to 512 [ 150.763273][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.780909][ T6308] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.978176][ T6308] virtiofs: Unknown parameter 'always 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 18 nlmon0 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 20 batadv0 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 21 vxcan0 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 22 vxcan1 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 23 veth0 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 24 veth1 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 25 wg0 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 26 wg1 : 1 V3 [ 150.978176][ T6308] 010000E0 1 0:00000000 0 [ 150.978176][ T6308] 27 wg2 : 1 ' [ 151.102913][ T6308] netlink: 'syz.4.83': attribute type 13 has an invalid length. [ 151.145081][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.459337][ T5957] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.468440][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.010341][ T5957] usb 2-1: config 0 descriptor?? [ 152.028576][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.066663][ T5957] usb 2-1: can't set config #0, error -71 [ 152.105711][ T6308] gretap0: refused to change device tx_queue_len [ 152.116588][ T6308] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 152.157075][ T5957] usb 2-1: USB disconnect, device number 2 [ 152.392055][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.464134][ T51] Bluetooth: hci5: command tx timeout [ 152.724006][ T6242] team0: Port device team_slave_0 added [ 152.745751][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.772697][ T6242] team0: Port device team_slave_1 added [ 152.809457][ T5957] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 152.942661][ T6323] capability: warning: `syz.0.91' uses deprecated v2 capabilities in a way that may be insecure [ 152.945364][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.993401][ T5957] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 153.024900][ T5957] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.035731][ T5957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.044966][ T5957] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 153.060741][ T5957] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.070192][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.078308][ T5957] usb 2-1: Product: syz [ 153.086578][ T5957] usb 2-1: Manufacturer: syz [ 153.095454][ T5957] usb 2-1: SerialNumber: syz [ 153.212194][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.246608][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.313611][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.342662][ T5957] usb 2-1: 0:2 : does not exist [ 154.289927][ T5957] usb 2-1: unit 6 not found! [ 154.293105][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.805723][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.948918][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.095121][ T5957] usb 2-1: USB disconnect, device number 3 [ 155.175876][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.214384][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.358938][ T6242] hsr_slave_0: entered promiscuous mode [ 156.365981][ T6242] hsr_slave_1: entered promiscuous mode [ 156.378805][ T6242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.386834][ T6242] Cannot create hsr debugfs directory [ 156.923262][ T6366] process 'syz.3.105' launched './file0' with NULL argv: empty string added [ 157.675166][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 157.675185][ T31] audit: type=1326 audit(1751389218.428:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643658e929 code=0x7ffc0000 [ 157.754610][ T31] audit: type=1326 audit(1751389218.478:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643658e929 code=0x7ffc0000 [ 157.791301][ T6373] loop3: detected capacity change from 0 to 512 [ 157.860656][ T31] audit: type=1326 audit(1751389218.558:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f643658e929 code=0x7ffc0000 [ 157.924350][ T31] audit: type=1326 audit(1751389218.558:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643658e929 code=0x7ffc0000 [ 157.959320][ T31] audit: type=1326 audit(1751389218.558:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643658e929 code=0x7ffc0000 [ 158.032193][ T6373] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.110: attempt to clear invalid blocks 2 len 1 [ 158.067630][ T6377] ================================================================== [ 158.075755][ T6377] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 158.083705][ T6377] Read of size 8 at addr ffff8880570fb0b0 by task syz.4.109/6377 [ 158.091443][ T6377] [ 158.093800][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.4.109 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 158.093831][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.093853][ T6377] Call Trace: [ 158.093862][ T6377] [ 158.093871][ T6377] dump_stack_lvl+0x189/0x250 [ 158.093911][ T6377] ? __virt_addr_valid+0x1c8/0x5c0 [ 158.093930][ T6377] ? rcu_is_watching+0x15/0xb0 [ 158.093957][ T6377] ? __kasan_check_byte+0x12/0x40 [ 158.093990][ T6377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.094020][ T6377] ? rcu_is_watching+0x15/0xb0 [ 158.094047][ T6377] ? lock_release+0x4b/0x3e0 [ 158.094075][ T6377] ? __virt_addr_valid+0x1c8/0x5c0 [ 158.094093][ T6377] ? __virt_addr_valid+0x4a5/0x5c0 [ 158.094113][ T6377] print_report+0xd2/0x2b0 [ 158.094140][ T6377] ? pause_parse_request+0x40/0x160 [ 158.094171][ T6377] kasan_report+0x118/0x150 [ 158.094190][ T6377] ? pause_parse_request+0x40/0x160 [ 158.094224][ T6377] ? __pfx_pause_parse_request+0x10/0x10 [ 158.094254][ T6377] pause_parse_request+0x40/0x160 [ 158.094285][ T6377] ? __pfx_pause_parse_request+0x10/0x10 [ 158.094315][ T6377] ethnl_default_set_doit+0x2c1/0xa40 [ 158.094338][ T6377] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 158.094367][ T6377] genl_family_rcv_msg_doit+0x215/0x300 [ 158.094417][ T6377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.094452][ T6377] ? bpf_lsm_capable+0x9/0x20 [ 158.094482][ T6377] ? security_capable+0x7e/0x2e0 [ 158.094512][ T6377] genl_rcv_msg+0x60e/0x790 [ 158.094541][ T6377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.094566][ T6377] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 158.094597][ T6377] netlink_rcv_skb+0x205/0x470 [ 158.094617][ T6377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.094643][ T6377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.094685][ T6377] ? down_read+0x1ad/0x2e0 [ 158.094707][ T6377] genl_rcv+0x28/0x40 [ 158.094730][ T6377] netlink_unicast+0x758/0x8d0 [ 158.094766][ T6377] netlink_sendmsg+0x805/0xb30 [ 158.094792][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.094820][ T6377] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.094848][ T6377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.094872][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.094893][ T6377] __sock_sendmsg+0x21c/0x270 [ 158.094925][ T6377] ____sys_sendmsg+0x505/0x830 [ 158.094952][ T6377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.094981][ T6377] ? import_iovec+0x74/0xa0 [ 158.095008][ T6377] ___sys_sendmsg+0x21f/0x2a0 [ 158.095033][ T6377] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.095078][ T6377] ? __fget_files+0x2a/0x420 [ 158.095098][ T6377] ? __fget_files+0x3a0/0x420 [ 158.095124][ T6377] __x64_sys_sendmsg+0x19b/0x260 [ 158.095150][ T6377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.095184][ T6377] ? __x64_sys_sendmsg+0x10/0x260 [ 158.095211][ T6377] do_syscall_64+0xfa/0x3b0 [ 158.095230][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.095259][ T6377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.095280][ T6377] ? clear_bhb_loop+0x60/0xb0 [ 158.095303][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.095324][ T6377] RIP: 0033:0x7fc32138e929 [ 158.095349][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.095367][ T6377] RSP: 002b:00007fc31f1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.095398][ T6377] RAX: ffffffffffffffda RBX: 00007fc3215b6160 RCX: 00007fc32138e929 [ 158.095414][ T6377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 158.095428][ T6377] RBP: 00007fc321410b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.095441][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.095454][ T6377] R13: 0000000000000000 R14: 00007fc3215b6160 R15: 00007fff9a93b5b8 [ 158.095478][ T6377] [ 158.095485][ T6377] [ 158.462964][ T6377] Allocated by task 6377: [ 158.467300][ T6377] kasan_save_track+0x3e/0x80 [ 158.472000][ T6377] __kasan_kmalloc+0x93/0xb0 [ 158.476606][ T6377] __kmalloc_noprof+0x27a/0x4f0 [ 158.481480][ T6377] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 158.487571][ T6377] genl_family_rcv_msg_doit+0xb8/0x300 [ 158.493040][ T6377] genl_rcv_msg+0x60e/0x790 [ 158.497558][ T6377] netlink_rcv_skb+0x205/0x470 [ 158.502333][ T6377] genl_rcv+0x28/0x40 [ 158.506341][ T6377] netlink_unicast+0x758/0x8d0 [ 158.511121][ T6377] netlink_sendmsg+0x805/0xb30 [ 158.515898][ T6377] __sock_sendmsg+0x21c/0x270 [ 158.520593][ T6377] ____sys_sendmsg+0x505/0x830 [ 158.525366][ T6377] ___sys_sendmsg+0x21f/0x2a0 [ 158.530066][ T6377] __x64_sys_sendmsg+0x19b/0x260 [ 158.535033][ T6377] do_syscall_64+0xfa/0x3b0 [ 158.539567][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.545472][ T6377] [ 158.547814][ T6377] The buggy address belongs to the object at ffff8880570fb080 [ 158.547814][ T6377] which belongs to the cache kmalloc-64 of size 64 [ 158.561699][ T6377] The buggy address is located 8 bytes to the right of [ 158.561699][ T6377] allocated 40-byte region [ffff8880570fb080, ffff8880570fb0a8) [ 158.576115][ T6377] [ 158.578470][ T6377] The buggy address belongs to the physical page: [ 158.584893][ T6377] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x570fb [ 158.593671][ T6377] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 158.601223][ T6377] page_type: f5(slab) [ 158.605212][ T6377] raw: 00fff00000000000 ffff88801a4418c0 ffffea0001fe4300 dead000000000005 [ 158.613805][ T6377] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 158.622390][ T6377] page dumped because: kasan: bad access detected [ 158.628815][ T6377] page_owner tracks the page as allocated [ 158.634550][ T6377] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5833, tgid 5833 (syz-executor), ts 92205821858, free_ts 29894417322 [ 158.653929][ T6377] post_alloc_hook+0x240/0x2a0 [ 158.658738][ T6377] get_page_from_freelist+0x21e4/0x22c0 [ 158.664295][ T6377] __alloc_frozen_pages_noprof+0x181/0x370 [ 158.670115][ T6377] alloc_pages_mpol+0x232/0x4a0 [ 158.674982][ T6377] allocate_slab+0x8a/0x370 [ 158.679509][ T6377] ___slab_alloc+0xbeb/0x1410 [ 158.684198][ T6377] __kmalloc_noprof+0x305/0x4f0 [ 158.689058][ T6377] kobject_get_path+0xc5/0x2d0 [ 158.693920][ T6377] kobject_uevent_env+0x292/0x8c0 [ 158.698955][ T6377] net_rx_queue_update_kobjects+0x3ba/0x720 [ 158.704878][ T6377] netdev_register_kobject+0x21f/0x310 [ 158.710431][ T6377] register_netdevice+0x126c/0x1ae0 [ 158.715641][ T6377] macvlan_common_newlink+0x120a/0x1980 [ 158.721223][ T6377] rtnl_newlink_create+0x310/0xb00 [ 158.726348][ T6377] rtnl_newlink+0x16d6/0x1c70 [ 158.731025][ T6377] rtnetlink_rcv_msg+0x7cf/0xb70 [ 158.735997][ T6377] page last free pid 1 tgid 1 stack trace: [ 158.741808][ T6377] __free_frozen_pages+0xb80/0xd80 [ 158.746929][ T6377] free_contig_range+0x1bd/0x4a0 [ 158.751890][ T6377] destroy_args+0x7e/0x5d0 [ 158.756322][ T6377] debug_vm_pgtable+0x3fa/0x430 [ 158.761273][ T6377] do_one_initcall+0x233/0x820 [ 158.766042][ T6377] do_initcall_level+0x137/0x1f0 [ 158.770988][ T6377] do_initcalls+0x69/0xd0 [ 158.775334][ T6377] kernel_init_freeable+0x3d9/0x570 [ 158.780560][ T6377] kernel_init+0x1d/0x1d0 [ 158.784900][ T6377] ret_from_fork+0x3fc/0x770 [ 158.789498][ T6377] ret_from_fork_asm+0x1a/0x30 [ 158.794276][ T6377] [ 158.796616][ T6377] Memory state around the buggy address: [ 158.802246][ T6377] ffff8880570faf80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 158.810309][ T6377] ffff8880570fb000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 158.818457][ T6377] >ffff8880570fb080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 158.826535][ T6377] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 158.832189][ T6377] ffff8880570fb100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 158.840252][ T6377] ffff8880570fb180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 158.848310][ T6377] ================================================================== [ 158.857977][ T6377] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.865288][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.4.109 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 158.876716][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.886790][ T6377] Call Trace: [ 158.890091][ T6377] [ 158.893032][ T6377] dump_stack_lvl+0x99/0x250 [ 158.897646][ T6377] ? __asan_memcpy+0x40/0x70 [ 158.902422][ T6377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.907637][ T6377] ? __pfx__printk+0x10/0x10 [ 158.912250][ T6377] panic+0x2db/0x790 [ 158.916252][ T6377] ? __pfx_panic+0x10/0x10 [ 158.920686][ T6377] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 158.926594][ T6377] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.932936][ T6377] ? print_memory_metadata+0x314/0x400 [ 158.938408][ T6377] ? pause_parse_request+0x40/0x160 [ 158.943626][ T6377] check_panic_on_warn+0x89/0xb0 [ 158.948576][ T6377] ? pause_parse_request+0x40/0x160 [ 158.953793][ T6377] end_report+0x78/0x160 [ 158.958068][ T6377] kasan_report+0x129/0x150 [ 158.962586][ T6377] ? pause_parse_request+0x40/0x160 [ 158.967814][ T6377] ? __pfx_pause_parse_request+0x10/0x10 [ 158.974273][ T6377] pause_parse_request+0x40/0x160 [ 158.979437][ T6377] ? __pfx_pause_parse_request+0x10/0x10 [ 158.985105][ T6377] ethnl_default_set_doit+0x2c1/0xa40 [ 158.990854][ T6377] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 158.996783][ T6377] genl_family_rcv_msg_doit+0x215/0x300 [ 159.002387][ T6377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 159.008476][ T6377] ? bpf_lsm_capable+0x9/0x20 [ 159.013346][ T6377] ? security_capable+0x7e/0x2e0 [ 159.018313][ T6377] genl_rcv_msg+0x60e/0x790 [ 159.023017][ T6377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.028051][ T6377] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 159.033965][ T6377] netlink_rcv_skb+0x205/0x470 [ 159.039085][ T6377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.044126][ T6377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.049534][ T6377] ? down_read+0x1ad/0x2e0 [ 159.053978][ T6377] genl_rcv+0x28/0x40 [ 159.057984][ T6377] netlink_unicast+0x758/0x8d0 [ 159.062778][ T6377] netlink_sendmsg+0x805/0xb30 [ 159.067606][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.072906][ T6377] ? aa_sock_msg_perm+0xf1/0x1d0 [ 159.077862][ T6377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.083174][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.088519][ T6377] __sock_sendmsg+0x21c/0x270 [ 159.093217][ T6377] ____sys_sendmsg+0x505/0x830 [ 159.098004][ T6377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.103415][ T6377] ? import_iovec+0x74/0xa0 [ 159.107941][ T6377] ___sys_sendmsg+0x21f/0x2a0 [ 159.112649][ T6377] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.117885][ T6377] ? __fget_files+0x2a/0x420 [ 159.122488][ T6377] ? __fget_files+0x3a0/0x420 [ 159.127177][ T6377] __x64_sys_sendmsg+0x19b/0x260 [ 159.132180][ T6377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.137661][ T6377] ? __x64_sys_sendmsg+0x10/0x260 [ 159.142764][ T6377] do_syscall_64+0xfa/0x3b0 [ 159.147274][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.152488][ T6377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.158563][ T6377] ? clear_bhb_loop+0x60/0xb0 [ 159.163254][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.169162][ T6377] RIP: 0033:0x7fc32138e929 [ 159.173597][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.193220][ T6377] RSP: 002b:00007fc31f1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.201650][ T6377] RAX: ffffffffffffffda RBX: 00007fc3215b6160 RCX: 00007fc32138e929 [ 159.209635][ T6377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 159.217617][ T6377] RBP: 00007fc321410b39 R08: 0000000000000000 R09: 0000000000000000 [ 159.225603][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.233580][ T6377] R13: 0000000000000000 R14: 00007fc3215b6160 R15: 00007fff9a93b5b8 [ 159.241569][ T6377] [ 159.244866][ T6377] Kernel Offset: disabled [ 159.249195][ T6377] Rebooting in 86400 seconds..