last executing test programs: 2m32.192800287s ago: executing program 32 (id=1082): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000500), 0x66) 2m30.474836362s ago: executing program 3 (id=1109): r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r2, 0x0, 0x0) 2m30.448610222s ago: executing program 3 (id=1110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) dup3(r2, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m30.379969074s ago: executing program 3 (id=1111): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x448, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40012022, 0x0) 2m30.323967935s ago: executing program 3 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 2m30.323296065s ago: executing program 3 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000002c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a310000000014000000020a050000000000000000000000000414000000110001"], 0x88}}, 0x0) 2m30.128048337s ago: executing program 3 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f00000005c0)='\vemPw\xff*\"G}N\xf9\x99G@m\xfc\xfe*8hyF\xdb\xc6\x91\x00p\xb7\x7f\xbao\xb8g&A4\xfc\x02\x87\\]\xa2\x95\x014\xf03w\xb1_\xdf\xc4x\xb4I\xc1\x89\xa3\x00\x00\x01\x00\x00\x00\xb2\xde;^\x03r\x10aj\xca\xdd5\x03\x00\x00\x00\x00\x00\x00k\xa5\xf3\xae\xcf%\v`\xb2\xe2vf\xc9\xac\xb8\xac\x8b2\x01\x1e]V\xc1\xf5\x94q|\xa8\x06\xf0\x82\xa0\x8bU\x15A\x8b\xbf,4\xcb\x89PC\xdc\xc9<\x96p5|\xb9|\x89\xa7\xce\xd4xP\xb9\x8bQ\x00'/159, 0x0) write(r2, &(0x7f00000004c0)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) 2m30.127846557s ago: executing program 33 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f00000005c0)='\vemPw\xff*\"G}N\xf9\x99G@m\xfc\xfe*8hyF\xdb\xc6\x91\x00p\xb7\x7f\xbao\xb8g&A4\xfc\x02\x87\\]\xa2\x95\x014\xf03w\xb1_\xdf\xc4x\xb4I\xc1\x89\xa3\x00\x00\x01\x00\x00\x00\xb2\xde;^\x03r\x10aj\xca\xdd5\x03\x00\x00\x00\x00\x00\x00k\xa5\xf3\xae\xcf%\v`\xb2\xe2vf\xc9\xac\xb8\xac\x8b2\x01\x1e]V\xc1\xf5\x94q|\xa8\x06\xf0\x82\xa0\x8bU\x15A\x8b\xbf,4\xcb\x89PC\xdc\xc9<\x96p5|\xb9|\x89\xa7\xce\xd4xP\xb9\x8bQ\x00'/159, 0x0) write(r2, &(0x7f00000004c0)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) 1m58.291435855s ago: executing program 2 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 1m58.225716006s ago: executing program 2 (id=1877): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000f80)="a9c16530970c63fbabb3e7", 0xb, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a", @ANYRES32], 0x6c}}, 0x40) 1m58.098459218s ago: executing program 2 (id=1882): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) fcntl$notify(r2, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1m58.073829468s ago: executing program 2 (id=1883): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 1m57.99526199s ago: executing program 2 (id=1884): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m57.800121992s ago: executing program 2 (id=1885): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) open(0x0, 0x20100, 0x10b) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r2, 0x0, 0xfff5, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0xa51, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff7d}, 0x1c) 1m57.799983523s ago: executing program 34 (id=1885): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) open(0x0, 0x20100, 0x10b) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r2, 0x0, 0xfff5, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0xa51, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff7d}, 0x1c) 1m17.596162846s ago: executing program 7 (id=2781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m17.510869437s ago: executing program 7 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 1m17.492844308s ago: executing program 7 (id=2788): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x80000000000000}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xe21, 0x7, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m17.403785529s ago: executing program 7 (id=2791): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m17.387488159s ago: executing program 7 (id=2793): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m17.131868353s ago: executing program 7 (id=2804): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x365) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 1m17.105673813s ago: executing program 35 (id=2804): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x365) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 1m9.27460127s ago: executing program 5 (id=2934): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd53}, 0xc42a, 0x900000000000000, 0x7, 0x2, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) 1m9.157060822s ago: executing program 5 (id=2941): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m9.104538913s ago: executing program 5 (id=2946): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000540)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@bsdgroups}, {@noinit_itable}, {@test_dummy_encryption}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}], [{@appraise}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 1m8.940053626s ago: executing program 5 (id=2955): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x2000414, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x31486c, 0x0) fsync(r0) renameat2(r0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1m8.756837028s ago: executing program 5 (id=2959): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0xfc9c) r1 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) shutdown(r0, 0x1) 1m8.66125114s ago: executing program 8 (id=2963): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m8.604044051s ago: executing program 5 (id=2964): r0 = io_uring_setup(0x563b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xffc9) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m8.603787441s ago: executing program 36 (id=2964): r0 = io_uring_setup(0x563b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xffc9) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m8.496338672s ago: executing program 8 (id=2967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 1m7.265132871s ago: executing program 8 (id=2980): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.106031123s ago: executing program 8 (id=2972): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x2000414, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b9, &(0x7f0000000fc0)="$eJzs3E1rE3sUx/HTpm3SlDa5cLlwL1w96EY3QxtfgAZpQQwotSnqQpjaiYaMSZkJlYjYbMStr6O4dCeoL8BuxI17d0UQ3HQhjjiTaZM2rWmap7bfD5T5Z87/x5ymD5wEJpu3Xz4q5FwjZ5ZlOKYyLFKVLZHk71XNUO047K/HpF5VLk58//z/rTt3r6czmdl51bn0wqWUqk6dffv46atz78sTi6+n3kRlI3lv81vqy8Y/G/9u/lx4mHdHxdViqaymLpVKZXPJtnQ57xYM1Zu2ZbqW5ouu5TTUc3ZpZaWiZnF5Mr7iWK6rZrGiBaui5ZKWnYqaD8x8UQ3D0Mm4nG4jLezJrs/Pm+l9y16kox2h68abnXScdLV5Mbveg54AAMCAOXj+D2b9/ef/zGJwbGv+1/x+87/Ikef/D2O9fy6Pg2rDoz/M/6FE07OxjjWFrnKctBmv/f02Yv4HAAAAAAAAAAAAAAAAAAAAAOA42PK8hOd5ifAYfkVrN3iEj/vdJ7qjzZ//5T61iw6ru3EvJmK/WM2uZoNjUE/nJC+2WDItCfnh/z7UBOu5a5nZafUl5Z29VsuvrWYjEg3zoWSYH/JvQwvyZ/6aCfLamB+VeP31U5KQv5tfP9U0PyYXztflDUnIx/tSEluW/Wvv5J/NqF69kdmVH/f3AQAAAABwEhi6bc/rd7/ub4jJ3nqQP8T7A7teX4/If618RCUAAAAAADgyt/KkYNq25bSxiIrIEeIndRGRgWhj1+KKiAxAG71axEQkOKPtxL9ux1tKeS3sGRGRvj8th1j0+z8TAAAAgE7bGfoPEfr0vIsdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+rT6eWDh/j2lsHBAvO5ykZ5/gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA+RUAAP//ovscvw==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x31486c, 0x0) fsync(r0) renameat2(r0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1m6.918090116s ago: executing program 8 (id=2975): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) 1m6.596073701s ago: executing program 8 (id=2983): write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 1m6.534658022s ago: executing program 37 (id=2983): write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 1.3389953s ago: executing program 9 (id=4365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x49, 0x7ffc0002}]}) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003001e00400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 1.288146231s ago: executing program 9 (id=4367): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 1.278193641s ago: executing program 6 (id=4368): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.259464671s ago: executing program 6 (id=4369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.239796122s ago: executing program 6 (id=4372): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff91, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.221364582s ago: executing program 6 (id=4374): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 1.138361013s ago: executing program 0 (id=4377): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.137991793s ago: executing program 0 (id=4378): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x2) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 1.137358363s ago: executing program 0 (id=4388): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 721.983549ms ago: executing program 0 (id=4390): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000390400"/20, @ANYRES32=r4, @ANYBLOB="8308000000000000380012800b000100697036746e6c00002800028005000900040000001400030020"], 0x58}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) 540.206682ms ago: executing program 4 (id=4383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 539.501672ms ago: executing program 4 (id=4384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 473.944803ms ago: executing program 4 (id=4386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) close(r4) 431.738914ms ago: executing program 1 (id=4387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) 431.530934ms ago: executing program 4 (id=4389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x2) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 431.127094ms ago: executing program 0 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff91, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 425.169284ms ago: executing program 9 (id=4391): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) connect$inet(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) timer_delete(0x0) 398.558384ms ago: executing program 4 (id=4392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x20d01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 397.899074ms ago: executing program 0 (id=4393): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 374.585815ms ago: executing program 9 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) listen(0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 372.770235ms ago: executing program 1 (id=4395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 343.051955ms ago: executing program 6 (id=4396): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 342.470895ms ago: executing program 9 (id=4397): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000001980)={[{@barrier}, {@nodiscard}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@acl}, {@noinit_itable}, {@usrquota}, {@i_version}]}, 0x10, 0x501, &(0x7f0000001f40)="$eJzs3cFvG1kZAPBvJvG2abMkCxzKSuyu2EXpCmonG7obcVgWCbGnlSjlXkLiRFGcOIqdtokqlApxBQkhQOLEiQsSVyQE6p+AkCrBjQMqCISghQMHwMjjcZsGO05V11OS30+azJt59nzfS+SZeTMvngBOrdci4r2IGIuINyNiKl+f5tP77forndc9uH9rqT0l0Wpd/WsSSb6uu60kn5+PiP2IOBsRX34/4mvJ/8Zt7O6tL9Zq1e18udLc2Ko0dvcurW0srlZXq5vz83NvL7yzcHlhtmfe3/zdk7VzOiLe/cIfv/ftH3/x3V9++sbvr/354tfbaU3m9QfbEXHmyTZ+hE7TS9nvoms8IraHFqFYY/m81Kf+W2MjTAYAgIHa5/gfjohPZOf/UzGWnZ0OMjGCzAAAAIBhaX1uMv6VRLQAAACAEyvNxsAmaTkfCzAZaVoud8bwfjTOpbV6o/mplfrO5nJnrOx0lNKVtVp1Nh8rPB2lpL08l4+x7S6/dWh5PiJeiojvTk1ky+Wlem256IsfAAAAcEqcP9T//8dU1v8f+A+w6WjSAwAAAIZluugEAAAAgGduUP//hRHlAQAAADw77v8DAADAifalDz5oT63u86+Xr+/urNevX1quNtbLGztL5aX69lZ5tV5fzb6zb2PQ9mr1+tZnYnPnZqVZbTQrjd29axv1nc3mtbXHHoENAAAAjNBLr975bRIR+5+dyKYw3B9OjWRAffaQkHv5wh9GkBAwMmNFJwAUZrzoBIDClIpOACjcoOsAfQfv/Gr4uQAAAM/GzMf63/93bQBONs/xBIDTx/1/OL1Kj48AvFxcJkBRPjSg/unv/7daT5QQAAAwdJPZlKTl/F7gZKRpuRzxYvZYgFKyslarzub9g99Mlc60l+eydyYDxwwDAAAAAAAAAAAAAAAAAAAAAAAAAB2tVhKtQ5KHdQAAAMBJEJH+Kcm+zT9iZuqNycPXB15I/jmVzSPixg+vfv/mYrO5Pdde/7eH65s/yNe/NeqrFwAAAEAv3X56tx8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP04P6tpe40yrh/+XxETD+Kf+Fnv6jkVa+ezWZnoxQR5/6exPiB9yURMTaE+Pu3I+JCr/Yn7bRiOjpZ9Io/UWD8NCLODyE+nGZ32vuf93p9/tJ4LZv3/vyN59PTOrz/Oxi/u/8b67P/efGYMV6++9NK3/i3I14e773/6cZP+sR//Zjxv/qVvb1e69vbaP0oYqbn8Sd57HWV5sZWpbG7d2ltY3G1ulrdnJ+fe3vhnYXLC7OVlbVaNf/ZM/53Pv7z/xzV/nN94k8PaP8bx2z/v+/evP+RTrHUK/7F13sffy/0iZ/mx75P5uV2/Uy3vN8pH/TKT379ylHtX+7T/od//x4H2nbMi8ds/5tXvnHvmC8FAEagsbu3vlirVbf/HwtpPBdpKAylcOb5SOM5KnS7QIVEL3jHBAAADN2jk/6iMwEAAAAAAAAAAAAAAAAAAIDTaxRfJ3Y45n4xTQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONJ/AwAA//87qs6H") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) write$bt_hci(r1, &(0x7f00000021c0)=ANY=[], 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf8, r4}, 0x14) splice(r0, 0x0, r3, 0x0, 0x104fd, 0x0) 315.738596ms ago: executing program 1 (id=4398): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 287.471586ms ago: executing program 6 (id=4400): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000390400"/20, @ANYRES32=r4, @ANYBLOB="8308000000000000380012800b000100697036746e6c00002800028005000900040000001400030020"], 0x58}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) 287.085476ms ago: executing program 1 (id=4401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) geteuid() r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x12001, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000000)='.\x00', 0x2) 214.326557ms ago: executing program 1 (id=4402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 213.891057ms ago: executing program 4 (id=4411): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x2004, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x4000) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000201b80000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0) 67.01329ms ago: executing program 9 (id=4403): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x2) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): at=0 ip=0x7f3471a5d58a code=0x7ffc0000 [ 162.943545][T11261] loop8: detected capacity change from 0 to 1024 [ 162.961155][T11261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.997857][T11261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.062511][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.109154][T11258] lo speed is unknown, defaulting to 1000 [ 163.174076][T11258] chnl_net:caif_netlink_parms(): no params data found [ 163.215458][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.222663][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.230297][T11258] bridge_slave_0: entered allmulticast mode [ 163.237629][T11258] bridge_slave_0: entered promiscuous mode [ 163.244695][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.251823][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.259014][T11258] bridge_slave_1: entered allmulticast mode [ 163.265529][T11258] bridge_slave_1: entered promiscuous mode [ 163.282422][T11258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.293118][T11258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.312177][T11258] team0: Port device team_slave_0 added [ 163.318914][T11258] team0: Port device team_slave_1 added [ 163.334428][T11258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.341440][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.367399][T11258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.378701][T11258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.385703][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.411750][T11258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.437634][T11258] hsr_slave_0: entered promiscuous mode [ 163.443823][T11258] hsr_slave_1: entered promiscuous mode [ 163.449623][T11258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.457198][T11258] Cannot create hsr debugfs directory [ 163.521522][T11258] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.530230][T11258] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.538976][T11258] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.547771][T11258] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.563430][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.570514][T11258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.577852][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.585025][T11258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.613505][T11258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.626186][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.634565][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.646213][T11258] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.656729][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.663846][ T7342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.674446][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.681609][ T7342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.744903][T11258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.821495][ T7862] usb 3-1: enqueue for inactive port 0 [ 163.827037][ T7862] usb 3-1: enqueue for inactive port 0 [ 163.850700][T11258] veth0_vlan: entered promiscuous mode [ 163.861349][T11258] veth1_vlan: entered promiscuous mode [ 163.876867][T11258] veth0_macvtap: entered promiscuous mode [ 163.884455][T11258] veth1_macvtap: entered promiscuous mode [ 163.896458][T11258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.908061][T11258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.915891][ T7862] vhci_hcd: vhci_device speed not set [ 163.918506][T11258] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.930023][T11258] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.938830][T11258] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.947732][T11258] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.041518][T11308] lo speed is unknown, defaulting to 1000 [ 164.171189][T11325] bridge0: entered promiscuous mode [ 164.176569][T11325] macvlan2: entered promiscuous mode [ 164.184524][T11328] loop8: detected capacity change from 0 to 128 [ 164.194025][T11325] bridge0: port 3(macvlan2) entered blocking state [ 164.200667][T11325] bridge0: port 3(macvlan2) entered disabled state [ 164.203218][T11328] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.209558][T11325] macvlan2: entered allmulticast mode [ 164.224701][T11325] bridge0: entered allmulticast mode [ 164.255834][T11325] macvlan2: left allmulticast mode [ 164.261100][T11325] bridge0: left allmulticast mode [ 164.271451][T11328] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.315049][T11325] bridge0: left promiscuous mode [ 164.335399][T10827] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 164.343080][T10827] FAT-fs (loop8): Filesystem has been set read-only [ 164.356612][T10827] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 164.579420][ T7333] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.673855][ T7333] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.755640][ T7333] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.834077][ T7333] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.994896][ T7333] bridge_slave_1: left allmulticast mode [ 165.000731][ T7333] bridge_slave_1: left promiscuous mode [ 165.006586][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.020228][ T7333] bridge_slave_0: left allmulticast mode [ 165.026089][ T7333] bridge_slave_0: left promiscuous mode [ 165.031844][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.174765][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.188409][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.198585][ T7333] bond0 (unregistering): Released all slaves [ 165.211171][T11358] @: renamed from vlan0 (while UP) [ 165.254898][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'. [ 165.282862][T11375] wg2: left promiscuous mode [ 165.287523][T11375] wg2: left allmulticast mode [ 165.307768][ T7333] hsr_slave_0: left promiscuous mode [ 165.313757][ T7333] hsr_slave_1: left promiscuous mode [ 165.319556][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.327151][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.334794][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.342397][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.353257][ T7333] veth1_macvtap: left promiscuous mode [ 165.358783][ T7333] veth0_macvtap: left promiscuous mode [ 165.364485][ T7333] veth1_vlan: left promiscuous mode [ 165.369856][ T7333] veth0_vlan: left promiscuous mode [ 165.384182][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 165.439104][ T7333] team0 (unregistering): Port device team_slave_1 removed [ 165.449577][ T7333] team0 (unregistering): Port device team_slave_0 removed [ 165.482716][T11373] wg2: entered promiscuous mode [ 165.487657][T11373] wg2: entered allmulticast mode [ 165.495856][T11375] wg2: entered promiscuous mode [ 165.500829][T11375] wg2: entered allmulticast mode [ 165.520618][T11344] lo speed is unknown, defaulting to 1000 [ 165.532423][T11380] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.603073][T11386] netlink: 'syz.9.2997': attribute type 10 has an invalid length. [ 165.611122][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2997'. [ 165.657592][T11386] dummy0: entered promiscuous mode [ 165.698681][T11344] chnl_net:caif_netlink_parms(): no params data found [ 165.733869][T11344] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.741064][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.748479][T11344] bridge_slave_0: entered allmulticast mode [ 165.755044][T11344] bridge_slave_0: entered promiscuous mode [ 165.761800][T11344] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.768966][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.776305][T11344] bridge_slave_1: entered allmulticast mode [ 165.782935][T11344] bridge_slave_1: entered promiscuous mode [ 165.802176][T11344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.812508][T11344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.832755][T11344] team0: Port device team_slave_0 added [ 165.839538][T11344] team0: Port device team_slave_1 added [ 165.856807][T11344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.863894][T11344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.889866][T11344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.901719][T11344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.908747][T11344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.934727][T11344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.961652][T11344] hsr_slave_0: entered promiscuous mode [ 165.967677][T11344] hsr_slave_1: entered promiscuous mode [ 165.973708][T11344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.981302][T11344] Cannot create hsr debugfs directory [ 166.228114][T11344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.236877][T11344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.245615][T11344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.254395][T11344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.288187][T11344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.300741][T11344] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.310458][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.317638][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.329087][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.336212][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.400407][T11344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.505916][T11344] veth0_vlan: entered promiscuous mode [ 166.514143][T11344] veth1_vlan: entered promiscuous mode [ 166.529438][T11344] veth0_macvtap: entered promiscuous mode [ 166.537115][T11344] veth1_macvtap: entered promiscuous mode [ 166.547988][T11344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.558914][T11344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.568526][T11344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.577429][T11344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.586336][T11344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.595156][T11344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.652575][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 166.672201][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 166.684791][T11427] hsr_slave_0 (unregistering): left promiscuous mode [ 166.700368][T11429] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.726669][T11428] lo speed is unknown, defaulting to 1000 [ 166.793819][T11429] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.863452][T11429] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.933345][T11429] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.546440][T11429] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.557984][T11429] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.568983][T11429] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.580130][T11429] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.765647][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 168.765670][ T29] audit: type=1326 audit(1750572696.851:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3471a558e7 code=0x7ffc0000 [ 168.799590][T11448] wg2: entered promiscuous mode [ 168.804998][T11448] wg2: entered allmulticast mode [ 168.884299][ T29] audit: type=1326 audit(1750572696.881:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34719fab19 code=0x7ffc0000 [ 168.908042][ T29] audit: type=1326 audit(1750572696.881:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3471a558e7 code=0x7ffc0000 [ 168.931667][ T29] audit: type=1326 audit(1750572696.881:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34719fab19 code=0x7ffc0000 [ 168.955480][ T29] audit: type=1326 audit(1750572696.881:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 168.979356][ T29] audit: type=1326 audit(1750572696.891:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 169.002981][ T29] audit: type=1326 audit(1750572696.891:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3471a558e7 code=0x7ffc0000 [ 169.026539][ T29] audit: type=1326 audit(1750572696.891:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34719fab19 code=0x7ffc0000 [ 169.050212][ T29] audit: type=1326 audit(1750572696.891:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 169.073867][ T29] audit: type=1326 audit(1750572696.891:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 170.109360][T11513] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3038'. [ 170.138361][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3039'. [ 170.243234][T11523] random: crng reseeded on system resumption [ 170.333994][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3045'. [ 170.409314][T11530] loop4: detected capacity change from 0 to 1024 [ 170.427189][T11530] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 170.475761][T11530] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 170.491437][T11540] loop9: detected capacity change from 0 to 512 [ 170.507515][T11540] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 170.571155][T11540] EXT4-fs (loop9): 1 truncate cleaned up [ 170.577423][T11540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.713132][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.095770][T11579] loop4: detected capacity change from 0 to 512 [ 171.113042][T11579] EXT4-fs: Ignoring removed bh option [ 171.127450][T11579] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.136623][T11579] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 171.161625][T11579] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 171.179166][T11579] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 171.191575][T11579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.239616][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.310668][T11637] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.403611][T11637] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.475701][T11637] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.557166][T11637] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.650439][T11637] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.676472][T11637] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.701073][T11637] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.725454][T11637] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.139557][T11678] IPVS: Error connecting to the multicast addr [ 173.187196][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3105'. [ 173.219653][T11680] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3105'. [ 173.352801][T11689] bridge: RTM_NEWNEIGH with invalid ether address [ 173.784055][T11723] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3123'. [ 173.793786][T11723] x_tables: ip_tables: udp match: only valid for protocol 17 [ 173.843639][T11729] bridge: RTM_NEWNEIGH with invalid ether address [ 174.202785][T11762] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 174.202923][T11761] IPVS: stopping master sync thread 11762 ... [ 174.225616][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 174.225634][ T29] audit: type=1326 audit(1750572702.311:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.260803][ T29] audit: type=1326 audit(1750572702.321:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.284451][ T29] audit: type=1326 audit(1750572702.321:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.308081][ T29] audit: type=1326 audit(1750572702.321:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.331725][ T29] audit: type=1326 audit(1750572702.321:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.355609][ T29] audit: type=1326 audit(1750572702.321:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.379166][ T29] audit: type=1326 audit(1750572702.321:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.402737][ T29] audit: type=1326 audit(1750572702.321:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.426497][ T29] audit: type=1326 audit(1750572702.321:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.450177][ T29] audit: type=1326 audit(1750572702.321:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 174.482362][T11771] random: crng reseeded on system resumption [ 174.669922][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3150'. [ 174.688759][T11784] x_tables: ip_tables: udp match: only valid for protocol 17 [ 174.747700][T11792] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 174.759375][T11790] IPVS: stopping master sync thread 11792 ... [ 175.084268][T11821] netlink: 'syz.0.3163': attribute type 4 has an invalid length. [ 175.103046][T11821] netlink: 'syz.0.3163': attribute type 4 has an invalid length. [ 175.239754][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3165'. [ 175.419362][T11837] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.3171'. [ 175.737129][T11861] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3180'. [ 175.805526][T11868] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.846224][T11868] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.930954][T11868] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.994946][T11868] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.080508][T11868] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.107348][T11868] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.137150][T11868] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.172961][T11868] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.537726][T11898] loop9: detected capacity change from 0 to 512 [ 176.556694][T11898] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.593247][T11898] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 176.601364][T11898] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 176.629528][T11898] System zones: 0-1, 15-15, 18-18, 34-34 [ 176.648165][T11898] EXT4-fs (loop9): orphan cleanup on readonly fs [ 176.656084][T11898] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 176.670902][T11898] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 176.736158][T11898] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3197: bg 0: block 40: padding at end of block bitmap is not set [ 176.750815][T11898] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 176.766172][T11898] EXT4-fs (loop9): 1 truncate cleaned up [ 176.773188][T11898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.811438][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.938909][T11922] loop4: detected capacity change from 0 to 8192 [ 177.647730][T11979] loop9: detected capacity change from 0 to 1024 [ 177.996817][T11998] netlink: 'syz.4.3248': attribute type 10 has an invalid length. [ 178.004829][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3248'. [ 178.050048][T11998] team0: Port device geneve1 added [ 178.097547][T12003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12003 comm=syz.6.3240 [ 178.292433][T12017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3246'. [ 178.330676][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 178.346756][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 178.357745][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 178.367972][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 178.377807][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 178.387165][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 178.464608][T12031] loop4: detected capacity change from 0 to 512 [ 178.493795][T12031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.507581][T12031] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.540460][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.867935][T12045] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.912755][T12045] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.964278][T12045] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.996580][T12065] lo speed is unknown, defaulting to 1000 [ 179.016331][T12045] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.086956][T12045] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.115821][T12045] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.128931][T12045] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.140816][T12045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.927613][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 179.927632][ T29] audit: type=1326 audit(1750572708.011:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 179.974542][ T29] audit: type=1326 audit(1750572708.011:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 179.998241][ T29] audit: type=1326 audit(1750572708.011:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.021961][ T29] audit: type=1326 audit(1750572708.011:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.045681][ T29] audit: type=1326 audit(1750572708.011:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.069284][ T29] audit: type=1326 audit(1750572708.011:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.092950][ T29] audit: type=1326 audit(1750572708.011:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.116605][ T29] audit: type=1326 audit(1750572708.011:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.140170][ T29] audit: type=1326 audit(1750572708.011:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.163706][ T29] audit: type=1326 audit(1750572708.011:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.9.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 180.251247][T12116] netlink: 'syz.6.3286': attribute type 10 has an invalid length. [ 180.263355][T12116] team0: Port device geneve1 added [ 180.315020][T12124] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 180.331423][T12124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.344344][T12122] lo speed is unknown, defaulting to 1000 [ 180.375652][T12124] bond1: (slave gretap1): making interface the new active one [ 180.384550][T12124] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 180.428374][T12124] vlan2: entered allmulticast mode [ 180.433619][T12124] bond1: entered allmulticast mode [ 180.438886][T12124] gretap1: entered allmulticast mode [ 180.445341][T12124] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 180.510136][T12132] __nla_validate_parse: 3 callbacks suppressed [ 180.510154][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 180.527663][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 180.537935][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 180.548192][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 180.558377][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 180.604545][T12134] loop4: detected capacity change from 0 to 2048 [ 180.671532][T12134] loop4: p1 < > p4 [ 180.676990][T12134] loop4: p4 size 8388608 extends beyond EOD, truncated [ 181.167744][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 181.176911][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3307'. [ 181.185946][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 181.195383][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3307'. [ 181.204450][T12181] netlink: 'syz.1.3307': attribute type 6 has an invalid length. [ 181.533982][T12209] netlink: 'syz.1.3319': attribute type 1 has an invalid length. [ 181.563614][T12209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.588541][T12209] bond3: (slave gretap1): making interface the new active one [ 181.597257][T12209] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 181.616695][T12209] vlan2: entered allmulticast mode [ 181.621927][T12209] bond3: entered allmulticast mode [ 181.627098][T12209] gretap1: entered allmulticast mode [ 181.633779][T12209] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 181.819747][T12242] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3331'. [ 182.057983][T12266] loop9: detected capacity change from 0 to 2048 [ 182.072364][T12266] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.163490][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.382429][T12287] netlink: 'syz.9.3348': attribute type 6 has an invalid length. [ 183.504092][T12367] xt_hashlimit: size too large, truncated to 1048576 [ 183.967125][T12388] lo: entered promiscuous mode [ 183.988881][T12388] tunl0: entered promiscuous mode [ 184.021777][T12388] gre0: entered promiscuous mode [ 184.044888][T12388] gretap0: entered promiscuous mode [ 184.084153][T12388] erspan0: entered promiscuous mode [ 184.096615][T12388] ip_vti0: entered promiscuous mode [ 184.114134][T12388] ip6_vti0: entered promiscuous mode [ 184.132191][T12388] sit0: entered promiscuous mode [ 184.153566][T12388] ip6tnl0: entered promiscuous mode [ 184.160973][T12388] ip6gre0: entered promiscuous mode [ 184.193248][T12388] ip6gretap0: entered promiscuous mode [ 184.199605][T12388] bridge0: port 1(dummy0) entered disabled state [ 184.222666][T12388] bridge0: entered promiscuous mode [ 184.229801][T12388] vcan0: entered promiscuous mode [ 184.252868][T12388] bond0: entered promiscuous mode [ 184.282891][T12388] team0: entered promiscuous mode [ 184.287995][T12388] geneve1: entered promiscuous mode [ 184.319473][T12388] nlmon0: entered promiscuous mode [ 184.335854][T12388] caif0: entered promiscuous mode [ 184.341138][T12388] veth0: entered promiscuous mode [ 184.346358][T12388] veth1: entered promiscuous mode [ 184.351492][T12388] wg0: entered promiscuous mode [ 184.356483][T12388] wg1: entered promiscuous mode [ 184.385126][T12390] loop4: detected capacity change from 0 to 512 [ 184.417976][T12390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.428736][T12388] wg2: left allmulticast mode [ 184.437599][T12390] EXT4-fs (loop4): 1 truncate cleaned up [ 184.444043][T12390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.457934][T12388] veth0_to_bridge: entered promiscuous mode [ 184.464020][T12388] bridge_slave_0: entered promiscuous mode [ 184.470024][T12388] veth1_to_bridge: entered promiscuous mode [ 184.476232][T12388] bridge_slave_1: entered promiscuous mode [ 184.482130][T12388] veth0_to_bond: entered promiscuous mode [ 184.487948][T12388] bond_slave_0: entered promiscuous mode [ 184.493745][T12388] veth1_to_bond: entered promiscuous mode [ 184.499609][T12388] bond_slave_1: entered promiscuous mode [ 184.505428][T12388] veth0_to_team: entered promiscuous mode [ 184.511280][T12388] team_slave_0: entered promiscuous mode [ 184.517064][T12388] veth1_to_team: entered promiscuous mode [ 184.523000][T12388] team_slave_1: entered promiscuous mode [ 184.528780][T12388] veth1_to_batadv: entered promiscuous mode [ 184.534792][T12388] batadv_slave_1: entered promiscuous mode [ 184.540693][T12388] xfrm0: entered promiscuous mode [ 184.546002][T12388] veth0_to_hsr: entered promiscuous mode [ 184.551841][T12388] veth1_to_hsr: entered promiscuous mode [ 184.557748][T12388] hsr0: entered promiscuous mode [ 184.562867][T12388] veth1_virt_wifi: entered promiscuous mode [ 184.568924][T12388] veth0_virt_wifi: entered promiscuous mode [ 184.575133][T12388] @: entered promiscuous mode [ 184.580069][T12388] vlan1: entered promiscuous mode [ 184.585287][T12388] macvlan0: entered promiscuous mode [ 184.590676][T12388] macvlan1: entered promiscuous mode [ 184.596117][T12388] ipvlan0: entered promiscuous mode [ 184.601428][T12388] ipvlan1: entered promiscuous mode [ 184.606975][T12388] macvtap0: entered promiscuous mode [ 184.612438][T12388] macsec0: entered promiscuous mode [ 184.617819][T12388] geneve0: entered promiscuous mode [ 184.625049][T12388] bridge1: entered promiscuous mode [ 184.630366][T12388] bridge2: entered promiscuous mode [ 184.635797][T12388] syztnl1: entered promiscuous mode [ 184.641127][T12388] …: entered promiscuous mode [ 184.645923][T12388] bond1: entered promiscuous mode [ 184.651165][T12388] bridge3: entered promiscuous mode [ 184.656553][T12388] bond2: entered promiscuous mode [ 184.661637][T12388] ip6erspan0: entered promiscuous mode [ 184.761955][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.787414][T12388] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.795951][T12388] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.804443][T12388] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.812844][T12388] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.848873][T12425] xt_hashlimit: size too large, truncated to 1048576 [ 184.944245][T12388] geneve2: left allmulticast mode [ 184.970143][T12388] team1: left allmulticast mode [ 184.988620][T12388] : entered promiscuous mode [ 185.004396][T12388] ip6gre1: entered promiscuous mode [ 185.009698][T12388] ip6gre1: left allmulticast mode [ 185.046277][T12388] bridge4: entered promiscuous mode [ 185.064044][T12388] ip6tnl1: entered promiscuous mode [ 185.095191][T12388] team2: entered promiscuous mode [ 185.101552][T12388] bridge5: entered promiscuous mode [ 185.119968][T12388] : entered promiscuous mode [ 185.135955][T12388] ip6gretap1: entered promiscuous mode [ 185.152576][T12388] gre1: entered promiscuous mode [ 185.181594][T12388] netdevsim netdevsim6 eth0: entered promiscuous mode [ 185.188565][T12388] netdevsim netdevsim6 eth1: entered promiscuous mode [ 185.220940][T12388] netdevsim netdevsim6 eth2: entered promiscuous mode [ 185.231384][T12388] netdevsim netdevsim6 eth3: entered promiscuous mode [ 185.249020][T12388] gre2: entered promiscuous mode [ 185.332107][T12449] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.425110][T12449] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.494446][T12449] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.554130][T12449] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.652922][T12449] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.701595][T12449] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.717489][T12449] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.764739][T12480] syzkaller0: entered promiscuous mode [ 185.770317][T12480] syzkaller0: entered allmulticast mode [ 185.782417][T12449] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.853133][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 185.853176][ T29] audit: type=1400 audit(1750572713.941:4923): avc: denied { append } for pid=12495 comm="syz.9.3433" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.079372][T12510] ALSA: seq fatal error: cannot create timer (-19) [ 186.248220][ T29] audit: type=1326 audit(1750572714.331:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.9.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 186.272080][ T29] audit: type=1326 audit(1750572714.331:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.9.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 186.370811][ T29] audit: type=1326 audit(1750572714.331:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.9.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 186.394338][ T29] audit: type=1326 audit(1750572714.331:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.9.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 186.417931][ T29] audit: type=1326 audit(1750572714.331:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.9.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 186.471297][T12530] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 186.517237][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.524751][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.532333][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.534897][T12541] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 186.539741][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.555050][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.555173][T12541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.562501][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.562536][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.575219][T12541] __nla_validate_parse: 12 callbacks suppressed [ 186.575306][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 186.576806][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.606802][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.614325][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.621777][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.629269][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.636706][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.644140][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.651650][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.659062][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.666525][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.673961][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.681415][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.688882][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.696316][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.703827][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.711270][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.718822][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.726366][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.733818][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.741270][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.748714][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.756292][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.763728][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.771369][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.778794][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.786329][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.793826][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.801316][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.808759][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.816263][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.823737][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.831204][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.838708][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.846146][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.853620][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.861110][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.868552][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.876152][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.883597][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.891030][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.898510][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.906055][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.913717][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.921181][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.928624][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.936103][ T7852] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 186.945930][ T7852] hid-generic 0008:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 186.946173][T12541] bond5 (unregistering): Released all slaves [ 187.036230][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3452'. [ 187.045336][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3452'. [ 187.121611][T12563] loop9: detected capacity change from 0 to 2048 [ 187.191724][T12563] loop9: p1 < > p4 [ 187.196314][T12563] loop9: p4 size 8388608 extends beyond EOD, truncated [ 187.472077][T12570] lo speed is unknown, defaulting to 1000 [ 187.590446][ T29] audit: type=1326 audit(1750572715.671:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182164e929 code=0x7ffc0000 [ 187.617370][ T29] audit: type=1326 audit(1750572715.671:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f182164e929 code=0x7ffc0000 [ 187.641021][ T29] audit: type=1326 audit(1750572715.671:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182164e929 code=0x7ffc0000 [ 187.664669][ T29] audit: type=1326 audit(1750572715.671:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f182164e929 code=0x7ffc0000 [ 188.522430][T12631] netlink: 'syz.4.3482': attribute type 10 has an invalid length. [ 188.556515][T12631] batman_adv: batadv0: Adding interface: team0 [ 188.562988][T12631] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.588303][T12631] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.620514][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 188.650024][T12639] program syz.4.3485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.684074][T12639] batman_adv: batadv0: Removing interface: team0 [ 188.701494][T12639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.709008][T12639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.726411][T12639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.733932][T12639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.920788][T12657] lo: entered promiscuous mode [ 188.925706][T12657] tunl0: entered promiscuous mode [ 188.930965][T12657] gre0: entered promiscuous mode [ 188.936071][T12657] gretap0: entered promiscuous mode [ 188.941422][T12657] erspan0: entered promiscuous mode [ 188.946807][T12657] ip_vti0: entered promiscuous mode [ 188.952086][T12657] ip6_vti0: entered promiscuous mode [ 188.957496][T12657] sit0: entered promiscuous mode [ 188.962685][T12657] ip6tnl0: entered promiscuous mode [ 188.967994][T12657] ip6gre0: entered promiscuous mode [ 188.973372][T12657] syz_tun: entered promiscuous mode [ 188.978662][T12657] ip6gretap0: entered promiscuous mode [ 188.984352][T12657] bridge0: entered promiscuous mode [ 188.989732][T12657] vcan0: entered promiscuous mode [ 188.995065][T12657] bond0: entered promiscuous mode [ 189.000251][T12657] team0: entered promiscuous mode [ 189.050053][T12657] nlmon0: entered promiscuous mode [ 189.055455][T12657] 0ªX¹¦À: entered promiscuous mode [ 189.060672][T12657] veth0: entered promiscuous mode [ 189.065856][T12657] veth1: entered promiscuous mode [ 189.071027][T12657] wg0: entered promiscuous mode [ 189.076020][T12657] wg1: entered promiscuous mode [ 189.094488][T12657] wg2: left allmulticast mode [ 189.119695][T12657] veth0_to_bridge: entered promiscuous mode [ 189.125833][T12657] bridge_slave_0: entered promiscuous mode [ 189.131778][T12657] veth1_to_bridge: entered promiscuous mode [ 189.137756][T12657] bridge_slave_1: entered promiscuous mode [ 189.143754][T12657] veth0_to_bond: entered promiscuous mode [ 189.149563][T12657] bond_slave_0: entered promiscuous mode [ 189.155312][T12657] veth1_to_bond: entered promiscuous mode [ 189.161245][T12657] bond_slave_1: entered promiscuous mode [ 189.167405][T12657] veth0_to_team: entered promiscuous mode [ 189.173660][T12657] team_slave_0: entered promiscuous mode [ 189.179375][T12657] veth1_to_team: entered promiscuous mode [ 189.185299][T12657] team_slave_1: entered promiscuous mode [ 189.191155][T12657] veth0_to_batadv: entered promiscuous mode [ 189.197206][T12657] veth1_to_batadv: entered promiscuous mode [ 189.203223][T12657] batadv_slave_1: entered promiscuous mode [ 189.209161][T12657] xfrm0: entered promiscuous mode [ 189.214425][T12657] veth0_to_hsr: entered promiscuous mode [ 189.220226][T12657] veth1_to_hsr: entered promiscuous mode [ 189.226150][T12657] hsr0: entered promiscuous mode [ 189.231228][T12657] veth1_virt_wifi: entered promiscuous mode [ 189.237278][T12657] veth0_virt_wifi: entered promiscuous mode [ 189.243587][T12657] vlan0: entered promiscuous mode [ 189.248864][T12657] vlan1: entered promiscuous mode [ 189.254089][T12657] macvlan0: entered promiscuous mode [ 189.259573][T12657] macvlan1: entered promiscuous mode [ 189.265059][T12657] ipvlan0: entered promiscuous mode [ 189.270382][T12657] ipvlan1: entered promiscuous mode [ 189.275951][T12657] macvtap0: entered promiscuous mode [ 189.281440][T12657] macsec0: entered promiscuous mode [ 189.286738][T12657] geneve1: entered promiscuous mode [ 189.292137][T12657] gre1: entered promiscuous mode [ 189.297253][T12657] GPL: entered promiscuous mode [ 189.297540][T12667] netlink: 'syz.6.3501': attribute type 10 has an invalid length. [ 189.302264][T12657] vxlan0: entered promiscuous mode [ 189.315454][T12657] veth2: entered promiscuous mode [ 189.320567][T12657] veth3: entered promiscuous mode [ 189.325692][T12657] bond1: entered promiscuous mode [ 189.330957][T12657] veth4: entered promiscuous mode [ 189.336161][T12657] veth5: entered promiscuous mode [ 189.341341][T12657] ip6gre1: entered promiscuous mode [ 189.346642][T12657] bridge1: entered promiscuous mode [ 189.352070][T12657] bond2: entered promiscuous mode [ 189.357173][T12657] ip6erspan0: entered promiscuous mode [ 189.362973][T12657] bridge2: entered promiscuous mode [ 189.368249][T12657] syztnl1: entered promiscuous mode [ 189.373627][T12657] bridge3: entered promiscuous mode [ 189.378968][T12657] team1: entered promiscuous mode [ 189.394185][T12657] gre2: entered promiscuous mode [ 189.420544][T12657] bridge4: entered promiscuous mode [ 189.431481][T12657] netdevsim netdevsim1 eth0: entered promiscuous mode [ 189.438435][T12657] netdevsim netdevsim1 eth1: entered promiscuous mode [ 189.457565][T12657] netdevsim netdevsim1 eth2: entered promiscuous mode [ 189.464622][T12657] netdevsim netdevsim1 eth3: entered promiscuous mode [ 189.471734][T12657] bond3: entered promiscuous mode [ 189.476837][T12657] gretap1: entered promiscuous mode [ 189.494829][T12667] team0: left promiscuous mode [ 189.771695][T12695] tipc: Enabling of bearer rejected, failed to enable media [ 189.836648][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3517'. [ 190.277723][T12733] loop4: detected capacity change from 0 to 256 [ 190.285346][T12733] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.902416][T12784] xfrm0: left promiscuous mode [ 190.908438][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3550'. [ 190.931828][T12783] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 190.962507][T12786] netlink: 'syz.1.3551': attribute type 1 has an invalid length. [ 190.983720][T12786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.991472][T12777] lo speed is unknown, defaulting to 1000 [ 190.998194][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 191.014310][T12786] bond4 (unregistering): Released all slaves [ 191.183149][T12793] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3554'. [ 191.192434][T12793] netlink: 'syz.1.3554': attribute type 9 has an invalid length. [ 191.200186][T12793] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3554'. [ 191.209304][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3554'. [ 191.515689][T12816] loop4: detected capacity change from 0 to 2048 [ 191.572092][T12816] loop4: p1 < > p4 [ 191.588380][T12816] loop4: p4 size 8388608 extends beyond EOD, truncated [ 191.642160][T12820] __nla_validate_parse: 2 callbacks suppressed [ 191.642196][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 191.684702][T12835] xfrm0: left promiscuous mode [ 191.755943][T12830] lo speed is unknown, defaulting to 1000 [ 191.839924][T12845] lo: entered promiscuous mode [ 191.845654][T12845] tunl0: entered promiscuous mode [ 191.850839][T12845] gre0: entered promiscuous mode [ 191.855986][T12845] gretap0: entered promiscuous mode [ 191.861371][T12845] erspan0: entered promiscuous mode [ 191.866707][T12845] ip_vti0: entered promiscuous mode [ 191.872057][T12845] ip6_vti0: entered promiscuous mode [ 191.877479][T12845] sit0: entered promiscuous mode [ 191.882599][T12845] ip6tnl0: entered promiscuous mode [ 191.888105][T12845] ip6gre0: entered promiscuous mode [ 191.893904][T12845] ip6gretap0: entered promiscuous mode [ 191.899506][T12845] bridge0: entered promiscuous mode [ 191.904907][T12845] vcan0: entered promiscuous mode [ 191.910100][T12845] bond0: entered promiscuous mode [ 191.915182][T12845] dummy0: entered promiscuous mode [ 191.920659][T12845] nlmon0: entered promiscuous mode [ 191.925931][T12845] 0ªX¹¦À: entered promiscuous mode [ 191.931070][T12845] 0ªX¹¦À: left allmulticast mode [ 191.936115][T12845] veth0: entered promiscuous mode [ 191.941274][T12845] veth1: entered promiscuous mode [ 191.946488][T12845] wg0: entered promiscuous mode [ 191.951509][T12845] wg1: entered promiscuous mode [ 191.957479][T12845] wg2: left allmulticast mode [ 191.962741][T12845] veth0_to_bridge: entered promiscuous mode [ 191.968776][T12845] bridge_slave_0: entered promiscuous mode [ 191.974755][T12845] veth1_to_bridge: entered promiscuous mode [ 191.980718][T12845] bridge_slave_1: entered promiscuous mode [ 191.986725][T12845] veth0_to_bond: entered promiscuous mode [ 191.992562][T12845] bond_slave_0: entered promiscuous mode [ 191.998351][T12845] veth1_to_bond: entered promiscuous mode [ 192.004223][T12845] bond_slave_1: entered promiscuous mode [ 192.010003][T12845] veth0_to_team: entered promiscuous mode [ 192.015914][T12845] team_slave_0: entered promiscuous mode [ 192.021657][T12845] veth1_to_team: entered promiscuous mode [ 192.027430][T12845] team_slave_1: entered promiscuous mode [ 192.033139][T12845] veth0_to_batadv: entered promiscuous mode [ 192.039188][T12845] veth1_to_batadv: entered promiscuous mode [ 192.045227][T12845] batadv_slave_1: entered promiscuous mode [ 192.051204][T12845] xfrm0: entered promiscuous mode [ 192.056404][T12845] veth1_to_hsr: entered promiscuous mode [ 192.062311][T12845] hsr0: entered promiscuous mode [ 192.067393][T12845] veth1_virt_wifi: entered promiscuous mode [ 192.073427][T12845] veth0_virt_wifi: entered promiscuous mode [ 192.079610][T12845] vlan1: entered promiscuous mode [ 192.084789][T12845] macvlan0: entered promiscuous mode [ 192.090216][T12845] macvlan1: entered promiscuous mode [ 192.095683][T12845] ipvlan0: entered promiscuous mode [ 192.101030][T12845] ipvlan1: entered promiscuous mode [ 192.106562][T12845] macvtap0: entered promiscuous mode [ 192.112001][T12845] macsec0: entered promiscuous mode [ 192.117341][T12845] geneve1: entered promiscuous mode [ 192.122718][T12845] geneve2: entered promiscuous mode [ 192.128047][T12845] bridge1: entered promiscuous mode [ 192.133482][T12845] bond1: entered promiscuous mode [ 192.138618][T12845] veth2: entered promiscuous mode [ 192.143792][T12845] veth3: entered promiscuous mode [ 192.148971][T12845] bond2: entered promiscuous mode [ 192.154094][T12845] bridge2: entered promiscuous mode [ 192.159452][T12845] ip6tnl1: entered promiscuous mode [ 192.164729][T12845] bond3: entered promiscuous mode [ 192.169828][T12845] bond4: entered promiscuous mode [ 192.175015][T12845] ip6tnl2: entered promiscuous mode [ 192.180278][T12845] ip6_vti1: entered promiscuous mode [ 192.185708][T12845] veth4: entered promiscuous mode [ 192.190940][T12845] veth5: entered promiscuous mode [ 192.196111][T12845] : entered promiscuous mode [ 192.200946][T12845] netdevsim netdevsim0 eth0: entered promiscuous mode [ 192.208033][T12845] netdevsim netdevsim0 eth1: entered promiscuous mode [ 192.214907][T12845] netdevsim netdevsim0 eth2: entered promiscuous mode [ 192.222225][T12845] netdevsim netdevsim0 eth3: entered promiscuous mode [ 192.495283][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3580'. [ 192.693730][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3584'. [ 192.704153][T12880] all: renamed from lo [ 192.721380][T12879] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 192.749793][T12882] lo: entered promiscuous mode [ 192.756534][T12882] tunl0: entered promiscuous mode [ 192.772339][T12882] gre0: entered promiscuous mode [ 192.793072][T12882] gretap0: entered promiscuous mode [ 192.800892][T12882] erspan0: entered promiscuous mode [ 192.822394][T12882] ip_vti0: entered promiscuous mode [ 192.837785][T12882] ip6_vti0: entered promiscuous mode [ 192.852220][T12882] sit0: entered promiscuous mode [ 192.860112][T12882] ip6tnl0: entered promiscuous mode [ 192.878015][T12882] ip6gre0: entered promiscuous mode [ 192.891393][T12882] syz_tun: entered promiscuous mode [ 192.899886][T12882] ip6gretap0: entered promiscuous mode [ 192.914984][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.922282][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.930518][T12882] bridge0: entered promiscuous mode [ 192.939826][T12882] vcan0: entered promiscuous mode [ 192.946579][T12882] bond0: entered promiscuous mode [ 192.951703][T12882] bond_slave_0: entered promiscuous mode [ 192.957635][T12882] bond_slave_1: entered promiscuous mode [ 192.965888][T12882] team0: entered promiscuous mode [ 192.971077][T12882] team_slave_0: entered promiscuous mode [ 192.976857][T12882] team_slave_1: entered promiscuous mode [ 192.982790][T12882] geneve1: entered promiscuous mode [ 192.988829][T12882] dummy0: entered promiscuous mode [ 192.996428][T12882] nlmon0: entered promiscuous mode [ 193.003691][T12882] caif0: entered promiscuous mode [ 193.009067][T12882] vxcan0: entered promiscuous mode [ 193.015185][T12882] vxcan1: entered promiscuous mode [ 193.021322][T12882] veth0: entered promiscuous mode [ 193.028338][T12882] veth1: entered promiscuous mode [ 193.037203][T12882] wg0: entered promiscuous mode [ 193.045836][T12882] wg1: entered promiscuous mode [ 193.048846][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3596'. [ 193.084634][T12882] wg2: left allmulticast mode [ 193.092378][T12882] veth0_to_bridge: entered promiscuous mode [ 193.101723][T12882] veth1_to_bridge: entered promiscuous mode [ 193.110929][T12882] veth0_to_bond: entered promiscuous mode [ 193.119042][T12882] veth1_to_bond: entered promiscuous mode [ 193.126863][T12882] veth0_to_team: entered promiscuous mode [ 193.134929][T12882] veth1_to_team: entered promiscuous mode [ 193.143078][T12882] veth0_to_batadv: entered promiscuous mode [ 193.150348][T12882] batadv_slave_0: entered promiscuous mode [ 193.157937][T12882] veth1_to_batadv: entered promiscuous mode [ 193.165469][T12882] batadv_slave_1: entered promiscuous mode [ 193.172820][T12882] xfrm0: entered promiscuous mode [ 193.179809][T12882] veth0_to_hsr: entered promiscuous mode [ 193.188459][T12882] veth1_to_hsr: entered promiscuous mode [ 193.196708][T12882] hsr0: entered promiscuous mode [ 193.203019][T12882] veth1_virt_wifi: entered promiscuous mode [ 193.210124][T12882] veth0_virt_wifi: entered promiscuous mode [ 193.221875][T12882] vlan0: entered promiscuous mode [ 193.227215][T12882] vlan1: entered promiscuous mode [ 193.232999][T12882] macvlan0: entered promiscuous mode [ 193.239510][T12882] macvlan1: entered promiscuous mode [ 193.246066][T12882] ipvlan0: entered promiscuous mode [ 193.251518][T12882] ipvlan1: entered promiscuous mode [ 193.259430][T12882] macvtap0: entered promiscuous mode [ 193.266153][T12882] macsec0: entered promiscuous mode [ 193.273354][T12882] geneve0: entered promiscuous mode [ 193.279844][T12882] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.288432][T12882] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.296920][T12882] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.305329][T12882] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.314926][T12882] veth2: entered promiscuous mode [ 193.320082][T12882] veth3: entered promiscuous mode [ 193.325388][T12882] netdevsim netdevsim4 eth0: entered promiscuous mode [ 193.332385][T12882] netdevsim netdevsim4 eth1: entered promiscuous mode [ 193.339230][T12882] netdevsim netdevsim4 eth2: entered promiscuous mode [ 193.346129][T12882] netdevsim netdevsim4 eth3: entered promiscuous mode [ 193.353326][T12882] gre1: entered promiscuous mode [ 193.358814][T12882] bond1: entered promiscuous mode [ 193.363969][T12882] gretap1: entered promiscuous mode [ 193.392159][T12919] netlink: 'syz.6.3603': attribute type 1 has an invalid length. [ 193.401214][T12905] veth0: entered promiscuous mode [ 193.438744][T12923] loop4: detected capacity change from 0 to 512 [ 193.446154][T12919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.459426][T12928] bond3: (slave gretap1): making interface the new active one [ 193.468188][T12928] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 193.480769][T12923] EXT4-fs (loop4): too many log groups per flexible block group [ 193.488525][T12923] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 193.515194][T12923] EXT4-fs (loop4): mount failed [ 193.539736][T12919] vlan0: entered allmulticast mode [ 193.544976][T12919] bond3: entered allmulticast mode [ 193.550194][T12919] gretap1: entered allmulticast mode [ 193.558649][T12919] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 193.594093][T12937] loop9: detected capacity change from 0 to 512 [ 193.624506][T12937] EXT4-fs (loop9): 1 orphan inode deleted [ 193.642540][ T7327] __quota_error: 269 callbacks suppressed [ 193.642607][ T7327] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 193.656255][T12937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.658352][ T7327] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 193.695408][T12937] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.764241][T12937] netlink: 332 bytes leftover after parsing attributes in process `syz.9.3607'. [ 193.797445][T12937] netlink: 'syz.9.3607': attribute type 9 has an invalid length. [ 193.805500][T12937] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3607'. [ 193.814663][T12937] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3607'. [ 193.896276][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.953977][T12958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3616'. [ 193.975498][T12958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12958 comm=syz.4.3616 [ 194.005331][T12960] lo: entered promiscuous mode [ 194.012566][T12960] tunl0: entered promiscuous mode [ 194.027021][T12960] gre0: entered promiscuous mode [ 194.039153][T12960] gretap0: entered promiscuous mode [ 194.046983][T12960] erspan0: entered promiscuous mode [ 194.054751][T12960] ip_vti0: entered promiscuous mode [ 194.062189][T12960] ip6_vti0: entered promiscuous mode [ 194.070580][T12960] sit0: entered promiscuous mode [ 194.080114][T12960] ip6tnl0: entered promiscuous mode [ 194.088062][T12960] ip6gre0: entered promiscuous mode [ 194.097694][T12960] syz_tun: entered promiscuous mode [ 194.110545][T12960] ip6gretap0: entered promiscuous mode [ 194.114175][T12977] loop4: detected capacity change from 0 to 512 [ 194.122349][T12960] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.122562][T12960] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.130639][T12977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.148918][T12977] EXT4-fs (loop4): 1 truncate cleaned up [ 194.155741][T12977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.157047][T12960] bridge0: entered promiscuous mode [ 194.189319][T12960] vcan0: entered promiscuous mode [ 194.204709][T12960] bond0: entered promiscuous mode [ 194.210036][T12960] bond_slave_0: entered promiscuous mode [ 194.215938][T12960] bond_slave_1: entered promiscuous mode [ 194.223580][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.232895][T12960] team0: entered promiscuous mode [ 194.238120][T12960] team_slave_0: entered promiscuous mode [ 194.244059][T12960] team_slave_1: entered promiscuous mode [ 194.253520][T12960] nlmon0: entered promiscuous mode [ 194.255863][T12984] loop4: detected capacity change from 0 to 512 [ 194.260714][T12960] caif0: entered promiscuous mode [ 194.270286][T12960] batadv0: entered promiscuous mode [ 194.271816][T12984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.277806][T12960] vxcan0: entered promiscuous mode [ 194.292201][T12984] EXT4-fs (loop4): 1 truncate cleaned up [ 194.292370][T12960] vxcan1: entered promiscuous mode [ 194.298396][T12984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.316116][T12960] wg0: entered promiscuous mode [ 194.323107][T12960] wg1: entered promiscuous mode [ 194.328170][ T29] audit: type=1400 audit(1750572722.411:5202): avc: denied { watch watch_reads } for pid=12983 comm="syz.4.3626" path="/135/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.352306][T12960] wg2: left allmulticast mode [ 194.357851][T12960] veth0_to_bridge: entered promiscuous mode [ 194.367001][T12960] veth1_to_bridge: entered promiscuous mode [ 194.376128][T12960] veth0_to_bond: entered promiscuous mode [ 194.384036][T12960] veth1_to_bond: entered promiscuous mode [ 194.392331][T12960] veth0_to_team: entered promiscuous mode [ 194.400795][T12960] veth1_to_team: entered promiscuous mode [ 194.408635][T12960] veth0_to_batadv: entered promiscuous mode [ 194.416178][T12960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.423771][T12960] batadv_slave_0: entered promiscuous mode [ 194.431092][T12960] veth1_to_batadv: entered promiscuous mode [ 194.438438][T12960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.446135][T12960] batadv_slave_1: entered promiscuous mode [ 194.453313][T12960] xfrm0: entered promiscuous mode [ 194.458673][T12960] veth0_to_hsr: entered promiscuous mode [ 194.466629][T12960] veth1_to_hsr: entered promiscuous mode [ 194.475380][T12960] hsr0: entered promiscuous mode [ 194.481771][T12960] veth1_virt_wifi: entered promiscuous mode [ 194.488904][T12960] veth0_virt_wifi: entered promiscuous mode [ 194.500870][T12960] @: entered promiscuous mode [ 194.505983][T12960] vlan1: entered promiscuous mode [ 194.511846][T12960] macvlan0: entered promiscuous mode [ 194.518267][T12960] macvlan1: entered promiscuous mode [ 194.524967][T12960] ipvlan0: entered promiscuous mode [ 194.530378][T12960] ipvlan1: entered promiscuous mode [ 194.538323][T12960] macvtap0: entered promiscuous mode [ 194.544701][T12960] macsec0: entered promiscuous mode [ 194.550973][T12960] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.559452][T12960] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.568235][T12960] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.576646][T12960] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.585233][T12960] geneve1: entered promiscuous mode [ 194.591452][T12960] netdevsim netdevsim9 eth0: entered promiscuous mode [ 194.598409][T12960] netdevsim netdevsim9 eth1: entered promiscuous mode [ 194.605819][T12960] netdevsim netdevsim9 eth2: entered promiscuous mode [ 194.612906][T12960] netdevsim netdevsim9 eth3: entered promiscuous mode [ 194.647996][T12970] lo speed is unknown, defaulting to 1000 [ 194.662285][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.696555][T12989] lo speed is unknown, defaulting to 1000 [ 194.845718][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3642'. [ 195.004042][ T29] audit: type=1326 audit(1750572723.091:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.6.3634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e9086e929 code=0x0 [ 195.081535][ T29] audit: type=1326 audit(1750572723.161:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9086e929 code=0x7ffc0000 [ 195.105323][ T29] audit: type=1326 audit(1750572723.161:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9086e929 code=0x7ffc0000 [ 195.128971][ T29] audit: type=1326 audit(1750572723.161:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f8e9086e929 code=0x7ffc0000 [ 195.152579][ T29] audit: type=1326 audit(1750572723.161:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9086e929 code=0x7ffc0000 [ 195.176224][ T29] audit: type=1326 audit(1750572723.171:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9086e929 code=0x7ffc0000 [ 195.224398][T13016] loop9: detected capacity change from 0 to 1024 [ 195.238197][T13016] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 195.283169][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3637'. [ 195.382866][T13023] loop4: detected capacity change from 0 to 8192 [ 195.607915][T13036] loop4: detected capacity change from 0 to 512 [ 195.688604][T13036] EXT4-fs (loop4): 1 orphan inode deleted [ 195.697129][T13036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.710125][ T7327] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 195.719993][ T7327] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 195.741096][T13036] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.798298][T13036] netlink: 'syz.4.3644': attribute type 9 has an invalid length. [ 195.819632][T13041] lo speed is unknown, defaulting to 1000 [ 195.907348][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.942449][T13045] pim6reg1: entered promiscuous mode [ 195.947852][T13045] pim6reg1: entered allmulticast mode [ 196.085989][T13051] loop4: detected capacity change from 0 to 1024 [ 196.096268][T13051] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 196.178662][T13054] veth4: entered promiscuous mode [ 196.184179][T13054] veth5: entered promiscuous mode [ 196.674138][T13099] loop4: detected capacity change from 0 to 256 [ 196.684789][T13099] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.697573][T13099] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.780517][T13114] lo speed is unknown, defaulting to 1000 [ 197.106210][ T29] audit: type=1326 audit(1750572725.191:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.0.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 197.185932][T13158] lo speed is unknown, defaulting to 1000 [ 197.706338][T13211] __nla_validate_parse: 5 callbacks suppressed [ 197.706355][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3673'. [ 198.211651][T13241] lo speed is unknown, defaulting to 1000 [ 198.386609][T13244] netlink: 'syz.4.3684': attribute type 4 has an invalid length. [ 198.430007][T13244] netlink: 'syz.4.3684': attribute type 4 has an invalid length. [ 199.799669][T13280] lo speed is unknown, defaulting to 1000 [ 199.897585][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 199.897601][ T29] audit: type=1326 audit(1750572727.981:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 199.941795][ T29] audit: type=1326 audit(1750572727.981:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 199.965431][ T29] audit: type=1326 audit(1750572727.981:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 199.975080][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.989047][ T29] audit: type=1326 audit(1750572727.981:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 199.998099][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.021142][ T29] audit: type=1326 audit(1750572727.981:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 200.052460][ T29] audit: type=1326 audit(1750572727.981:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 200.076021][ T29] audit: type=1326 audit(1750572727.981:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 200.099570][ T29] audit: type=1326 audit(1750572727.981:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 200.123268][ T29] audit: type=1326 audit(1750572727.981:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 200.146810][ T29] audit: type=1326 audit(1750572728.011:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.1.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 200.187701][T13303] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3698'. [ 200.228265][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3701'. [ 200.416155][T13337] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3708'. [ 200.426400][T13326] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3708'. [ 200.494353][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3717'. [ 200.543778][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3719'. [ 200.557944][T13352] team0: Port device team_slave_0 removed [ 200.660582][T13354] lo speed is unknown, defaulting to 1000 [ 200.803521][T13370] loop9: detected capacity change from 0 to 1024 [ 200.813631][T13370] EXT4-fs: Ignoring removed oldalloc option [ 200.819747][T13370] EXT4-fs: Ignoring removed orlov option [ 200.831149][T13370] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.867241][T13370] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.914320][T13379] xt_hashlimit: max too large, truncated to 1048576 [ 200.966218][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.982118][T13381] loop4: detected capacity change from 0 to 1024 [ 200.993528][T13383] netlink: 'syz.9.3732': attribute type 10 has an invalid length. [ 201.001771][T13383] dummy0: left promiscuous mode [ 201.007714][T13381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.020943][T13383] dummy0: entered promiscuous mode [ 201.026459][T13383] team0: Port device dummy0 added [ 201.032379][T13383] netlink: 'syz.9.3732': attribute type 10 has an invalid length. [ 201.041005][T13383] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.042623][T13381] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.050481][T13383] dummy0: left promiscuous mode [ 201.067323][T13383] team0: Failed to send options change via netlink (err -105) [ 201.075447][T13383] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.084540][T13383] team0: Port device dummy0 removed [ 201.090928][T13383] dummy0: entered promiscuous mode [ 201.096550][T13383] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.109942][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 201.139337][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3735'. [ 201.173155][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.263763][T13400] loop9: detected capacity change from 0 to 128 [ 201.440915][T13400] syz.9.3739: attempt to access beyond end of device [ 201.440915][T13400] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 201.461164][T13400] syz.9.3739: attempt to access beyond end of device [ 201.461164][T13400] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 201.481258][T13400] syz.9.3739: attempt to access beyond end of device [ 201.481258][T13400] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 201.505197][T13400] syz.9.3739: attempt to access beyond end of device [ 201.505197][T13400] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 201.538929][T13400] syz.9.3739: attempt to access beyond end of device [ 201.538929][T13400] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 201.561201][T13409] loop4: detected capacity change from 0 to 1024 [ 201.593193][T13400] syz.9.3739: attempt to access beyond end of device [ 201.593193][T13400] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 201.615435][T13400] syz.9.3739: attempt to access beyond end of device [ 201.615435][T13400] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 201.637240][T13400] syz.9.3739: attempt to access beyond end of device [ 201.637240][T13400] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 201.657227][T13400] syz.9.3739: attempt to access beyond end of device [ 201.657227][T13400] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 201.688470][T13400] syz.9.3739: attempt to access beyond end of device [ 201.688470][T13400] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 201.779942][T13409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.822199][T13409] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 201.857256][T13409] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 201.869741][T13409] EXT4-fs (loop4): This should not happen!! Data will be lost [ 201.869741][T13409] [ 201.873961][T13417] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 201.879486][T13409] EXT4-fs (loop4): Total free blocks count 0 [ 201.891806][T13417] EXT4-fs (loop4): This should not happen!! Data will be lost [ 201.891806][T13417] [ 201.897753][T13409] EXT4-fs (loop4): Free/Dirty block details [ 201.907427][T13417] EXT4-fs (loop4): Total free blocks count 0 [ 201.907443][T13417] EXT4-fs (loop4): Free/Dirty block details [ 201.913392][T13409] EXT4-fs (loop4): free_blocks=68451041280 [ 202.218374][T13432] lo speed is unknown, defaulting to 1000 [ 202.609775][T13457] lo speed is unknown, defaulting to 1000 [ 202.670400][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 203.230487][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.239470][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.248153][T13478] bond0: (slave dummy0): Releasing backup interface [ 203.566910][T13508] veth1_to_bond: entered allmulticast mode [ 203.585767][T13508] veth1_to_bond: left allmulticast mode [ 203.951055][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3790'. [ 203.992300][T13522] team0 (unregistering): Port device team_slave_1 removed [ 204.005209][T13525] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3789'. [ 204.015134][T13520] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3789'. [ 204.108709][T13535] $Hÿ: renamed from bond0 [ 204.160763][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3797'. [ 204.716221][T13557] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3803'. [ 204.726229][T13556] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3803'. [ 204.758721][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3804'. [ 204.846143][T13561] loop4: detected capacity change from 0 to 128 [ 205.105945][T13568] $Hÿ: renamed from bond0 [ 205.442600][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 205.442670][ T29] audit: type=1326 audit(1750572733.531:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.473899][ T29] audit: type=1326 audit(1750572733.531:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.497583][ T29] audit: type=1326 audit(1750572733.561:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.521333][ T29] audit: type=1326 audit(1750572733.561:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.545105][ T29] audit: type=1326 audit(1750572733.561:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.569418][ T29] audit: type=1326 audit(1750572733.561:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.592994][ T29] audit: type=1326 audit(1750572733.561:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.616809][ T29] audit: type=1326 audit(1750572733.561:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.640460][ T29] audit: type=1326 audit(1750572733.661:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.701156][ T29] audit: type=1326 audit(1750572733.661:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc681cee929 code=0x7ffc0000 [ 205.852965][T13591] block device autoloading is deprecated and will be removed. [ 205.961460][T13598] loop4: detected capacity change from 0 to 512 [ 205.983370][T13598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.996494][T13598] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.072316][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.217787][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'. [ 206.281957][T13621] xt_hashlimit: size too large, truncated to 1048576 [ 206.923897][T13636] blktrace: Concurrent blktraces are not allowed on loop13 [ 207.329851][T13675] tipc: Enabling of bearer rejected, failed to enable media [ 207.390999][ T7847] usb usb8-port1: attempt power cycle [ 207.397428][T13679] xfrm0: left promiscuous mode [ 207.449292][T13672] lo speed is unknown, defaulting to 1000 [ 208.202399][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 208.267350][T13728] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.286215][T13728] bond0: (slave bond5): Enslaving as an active interface with an up link [ 208.308586][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3872'. [ 208.321120][T13728] bond0 (unregistering): (slave bond5): Releasing backup interface [ 208.332516][T13728] bond0 (unregistering): Released all slaves [ 208.403429][T13721] blktrace: Concurrent blktraces are not allowed on loop9 [ 208.708780][T13766] veth0_vlan: entered allmulticast mode [ 208.716310][T13766] ªªªªªª: renamed from vlan0 [ 209.251242][ T7847] usb usb8-port1: unable to enumerate USB device [ 209.261097][T13576] usb usb8: usbfs: process 13576 (syz.1.3811) did not claim interface 0 before use [ 209.427915][T13799] loop1: detected capacity change from 0 to 2048 [ 209.469331][T13799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.647265][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.774212][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3907'. [ 209.950400][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3914'. [ 209.972435][T13848] team0 (unregistering): Port device team_slave_0 removed [ 209.984020][T13848] team0 (unregistering): Port device team_slave_1 removed [ 210.001737][T13848] team0 (unregistering): Port device geneve1 removed [ 210.346880][T13899] xt_hashlimit: size too large, truncated to 1048576 [ 210.460622][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 210.460673][ T29] audit: type=1326 audit(1750572738.541:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.563810][ T29] audit: type=1326 audit(1750572738.581:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.587533][ T29] audit: type=1326 audit(1750572738.581:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.611142][ T29] audit: type=1326 audit(1750572738.581:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.634729][ T29] audit: type=1326 audit(1750572738.581:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.658264][ T29] audit: type=1326 audit(1750572738.581:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.681928][ T29] audit: type=1326 audit(1750572738.581:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.705619][ T29] audit: type=1326 audit(1750572738.581:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.729290][ T29] audit: type=1326 audit(1750572738.581:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 210.752860][ T29] audit: type=1326 audit(1750572738.581:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3471a5e929 code=0x7ffc0000 [ 211.211617][T13981] xt_hashlimit: size too large, truncated to 1048576 [ 211.863061][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3942'. [ 211.898792][T14040] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.907645][T14040] bond0: (slave bond4): Enslaving as an active interface with an up link [ 211.923246][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3942'. [ 211.933996][T14040] bond0 (unregistering): (slave bond4): Releasing backup interface [ 211.952287][ T3387] IPVS: starting estimator thread 0... [ 211.953128][T14040] bond0 (unregistering): Released all slaves [ 211.968975][T14049] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 212.028870][T14055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14055 comm=syz.6.3948 [ 212.041694][T14047] IPVS: using max 1776 ests per chain, 88800 per kthread [ 212.048866][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 212.061168][T14055] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.069468][T14055] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.077835][T14055] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.086114][T14055] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.204061][T14063] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.272501][T14063] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.322599][T14063] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.382309][T14063] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.467731][T14063] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.490016][T14063] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.519891][T14063] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.533076][T14078] loop9: detected capacity change from 0 to 764 [ 212.543272][T14063] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.553427][T14078] rock: directory entry would overflow storage [ 212.559698][T14078] rock: sig=0x5850, size=36, remaining=7 [ 212.766467][T14095] loop4: detected capacity change from 0 to 1024 [ 212.785121][T14095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.797351][T14095] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.871442][T14106] syzkaller0: entered promiscuous mode [ 212.908771][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.971131][T14111] SELinux: ebitmap: truncated map [ 212.990171][T14111] SELinux: failed to load policy [ 213.072717][T14123] random: crng reseeded on system resumption [ 213.087235][T14128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14128 comm=syz.9.3977 [ 213.103651][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3977'. [ 213.115735][T14128] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.124064][T14128] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.132346][T14128] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.140834][T14128] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.317864][T14151] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 214.194973][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4000'. [ 214.226574][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3994'. [ 214.480479][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4007'. [ 214.738026][T14219] loop9: detected capacity change from 0 to 2048 [ 214.781558][T14219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.851660][T14219] EXT4-fs error (device loop9): ext4_find_extent:939: inode #2: comm syz.9.4016: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 214.896073][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.220648][T14239] random: crng reseeded on system resumption [ 215.282707][T14245] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4024'. [ 215.531802][T14269] loop4: detected capacity change from 0 to 256 [ 215.579136][T14269] loop4: detected capacity change from 0 to 512 [ 215.594577][T14269] journal_path: Non-blockdev passed as './file0' [ 215.601025][T14269] EXT4-fs: error: could not find journal device path [ 215.993541][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 216.002563][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 216.015585][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4032'. [ 216.120200][T14280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.151731][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 216.179927][T14280] bond2: (slave bond3): Enslaving as an active interface with an up link [ 216.215645][T14283] bond2 (unregistering): (slave bond3): Releasing backup interface [ 216.223912][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 216.223929][ T29] audit: type=1326 audit(1750572744.301:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.253703][ T29] audit: type=1326 audit(1750572744.301:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.277330][ T29] audit: type=1326 audit(1750572744.301:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.301016][ T29] audit: type=1326 audit(1750572744.301:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.324550][ T29] audit: type=1326 audit(1750572744.301:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.348184][ T29] audit: type=1326 audit(1750572744.371:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.371808][ T29] audit: type=1326 audit(1750572744.371:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.395406][ T29] audit: type=1326 audit(1750572744.371:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.419382][ T29] audit: type=1326 audit(1750572744.461:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec7fb6e929 code=0x7ffc0000 [ 216.444523][T14283] bond2 (unregistering): Released all slaves [ 216.517929][T14293] 9pnet: p9_errstr2errno: server reported unknown error [ 216.528787][T14292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4037'. [ 216.647339][T14303] syzkaller0: entered promiscuous mode [ 216.932333][T14330] netlink: 'syz.4.4053': attribute type 4 has an invalid length. [ 217.107393][T14346] loop1: detected capacity change from 0 to 1024 [ 217.126315][T14346] EXT4-fs: Ignoring removed orlov option [ 217.155405][T14346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.217589][T14360] loop4: detected capacity change from 0 to 512 [ 217.323436][T14360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.404351][T14360] ext4 filesystem being mounted at /225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.537128][T14360] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 10: comm syz.4.4065: lblock 15 mapped to illegal pblock 10 (length 19) [ 217.585160][T14360] EXT4-fs (loop4): Remounting filesystem read-only [ 217.604495][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.634806][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.655121][T14374] netlink: 'syz.1.4069': attribute type 4 has an invalid length. [ 217.691857][T14379] loop4: detected capacity change from 0 to 1024 [ 217.698851][T14379] EXT4-fs: Ignoring removed orlov option [ 217.712432][T14379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.736680][T14383] loop1: detected capacity change from 0 to 256 [ 217.821186][T14383] loop1: detected capacity change from 0 to 512 [ 217.848175][T14383] journal_path: Non-blockdev passed as './file0' [ 217.854622][T14383] EXT4-fs: error: could not find journal device path [ 218.100802][T14393] netlink: 'syz.1.4075': attribute type 11 has an invalid length. [ 218.154947][T11344] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.193584][ T29] audit: type=1400 audit(1750572746.281:5689): avc: denied { watch watch_reads } for pid=14396 comm="syz.4.4077" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 218.297319][T14400] loop1: detected capacity change from 0 to 764 [ 218.361863][T14395] rock: directory entry would overflow storage [ 218.368095][T14395] rock: sig=0x5850, size=36, remaining=7 [ 218.598433][T14411] loop1: detected capacity change from 0 to 1024 [ 218.624936][T14411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.639518][T14411] ext4 filesystem being mounted at /866/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.802541][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.070072][T14493] netlink: 'syz.0.4107': attribute type 11 has an invalid length. [ 219.417992][T14550] ÿÿÿÿÿÿ: renamed from vlan1 [ 219.449558][T14545] loop1: detected capacity change from 0 to 4096 [ 219.470113][T14559] netlink: 'syz.0.4106': attribute type 1 has an invalid length. [ 219.482071][T14545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.518794][T14559] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 219.530956][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4106'. [ 219.551609][T14559] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 219.576111][T14559] bond0 (unregistering): Released all slaves [ 219.619602][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.840541][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4125'. [ 219.849535][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4125'. [ 219.962051][T14624] netlink: 'syz.0.4114': attribute type 10 has an invalid length. [ 220.184041][T14643] loop9: detected capacity change from 0 to 4096 [ 220.193765][T14643] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.194006][T14645] netlink: 'syz.1.4123': attribute type 1 has an invalid length. [ 220.235991][T14645] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 220.247604][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4123'. [ 220.257709][T14645] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 220.267073][T14645] bond4 (unregistering): Released all slaves [ 220.283324][T11258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.332669][T14653] net_ratelimit: 5 callbacks suppressed [ 220.332688][T14653] bond_slave_1: mtu less than device minimum [ 220.456784][T14670] netlink: 'syz.1.4133': attribute type 10 has an invalid length. [ 220.468901][T14670] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.516620][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.525539][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.670548][T14682] lo speed is unknown, defaulting to 1000 [ 220.727572][T14682] chnl_net:caif_netlink_parms(): no params data found [ 220.763180][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.770297][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.777651][T14682] bridge_slave_0: entered allmulticast mode [ 220.784342][T14682] bridge_slave_0: entered promiscuous mode [ 220.791668][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.798795][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.806116][T14682] bridge_slave_1: entered allmulticast mode [ 220.812759][T14682] bridge_slave_1: entered promiscuous mode [ 220.830654][T14682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.841433][T14682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.861322][T14682] team0: Port device team_slave_0 added [ 220.868065][T14682] team0: Port device team_slave_1 added [ 220.883853][T14682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.890952][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.916957][T14682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.928473][T14682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.935498][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.961914][T14682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.967584][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4142'. [ 220.981480][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4142'. [ 221.009783][T14682] hsr_slave_0: entered promiscuous mode [ 221.015976][T14682] hsr_slave_1: entered promiscuous mode [ 221.289768][T14682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.308833][T14682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.326677][T14682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.346422][T14682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.375160][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.382396][T14682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.389779][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.396962][T14682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.430667][T14755] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 221.453880][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.472717][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.480908][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.494083][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.505932][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.513130][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.531695][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.538877][ T5443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.612576][T14682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.752527][T14682] veth0_vlan: entered promiscuous mode [ 221.761659][T14682] veth1_vlan: entered promiscuous mode [ 221.779997][T14682] veth0_macvtap: entered promiscuous mode [ 221.789153][T14682] veth1_macvtap: entered promiscuous mode [ 221.802338][T14682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.815740][T14682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.826481][T14682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.835347][T14682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.844287][T14682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.853059][T14682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.902230][ T29] audit: type=1326 audit(1750572749.991:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 221.926871][ T29] audit: type=1326 audit(1750572749.991:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 221.950470][ T29] audit: type=1326 audit(1750572749.991:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 221.974281][ T29] audit: type=1326 audit(1750572749.991:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 221.997984][ T29] audit: type=1326 audit(1750572749.991:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 222.021594][ T29] audit: type=1326 audit(1750572749.991:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 222.045054][ T29] audit: type=1326 audit(1750572749.991:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 222.068693][ T29] audit: type=1326 audit(1750572749.991:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 222.092251][ T29] audit: type=1326 audit(1750572749.991:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 222.115870][ T29] audit: type=1326 audit(1750572749.991:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14836 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe73ee3e929 code=0x7ffc0000 [ 222.153864][T14844] netlink: 'syz.9.4152': attribute type 10 has an invalid length. [ 222.164106][T14844] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 222.190012][T14849] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.4162'. [ 222.233485][T14856] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4155'. [ 222.351174][T14869] loop9: detected capacity change from 0 to 512 [ 222.373309][T14869] EXT4-fs (loop9): blocks per group (71) and clusters per group (20800) inconsistent [ 222.389371][T14872] lo speed is unknown, defaulting to 1000 [ 222.585995][T14894] netlink: 'syz.0.4163': attribute type 3 has an invalid length. [ 222.593889][T14894] netlink: 'syz.0.4163': attribute type 1 has an invalid length. [ 222.601680][T14894] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4163'. [ 222.808265][T14903] netlink: 'syz.4.4165': attribute type 4 has an invalid length. [ 222.825008][T14903] netlink: 'syz.4.4165': attribute type 4 has an invalid length. [ 222.887856][T14909] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4168'. [ 223.161717][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 223.170923][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 223.202747][T14928] netlink: 'syz.1.4176': attribute type 6 has an invalid length. [ 223.238530][T14930] loop1: detected capacity change from 0 to 2048 [ 223.252969][T14930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.425912][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.451301][T14945] loop9: detected capacity change from 0 to 1024 [ 223.458487][T14945] EXT4-fs (loop9): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 223.480310][T14945] loop9: detected capacity change from 0 to 2048 [ 223.491124][T14945] /dev/loop9: Can't open blockdev [ 223.535178][T14949] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 223.932127][T11258] bond0: (slave syz_tun): Releasing backup interface [ 224.038230][T14967] netlink: 'syz.1.4191': attribute type 3 has an invalid length. [ 224.046106][T14967] netlink: 'syz.1.4191': attribute type 1 has an invalid length. [ 224.053897][T14967] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4191'. [ 224.222400][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 224.251374][T14976] loop1: detected capacity change from 0 to 2048 [ 224.272350][T14976] EXT4-fs (loop1): failed to initialize system zone (-117) [ 224.279702][T14976] EXT4-fs (loop1): mount failed [ 224.374235][T14968] lo speed is unknown, defaulting to 1000 [ 224.455223][T14990] bridge0: entered promiscuous mode [ 224.478876][T14990] vlan2: entered promiscuous mode [ 224.500487][T14994] netlink: 'syz.6.4199': attribute type 6 has an invalid length. [ 224.553213][T14968] chnl_net:caif_netlink_parms(): no params data found [ 224.571617][T15000] netlink: 'syz.6.4201': attribute type 4 has an invalid length. [ 224.652045][T14968] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.659192][T14968] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.667826][T14968] bridge_slave_0: entered allmulticast mode [ 224.689945][T14968] bridge_slave_0: entered promiscuous mode [ 224.705409][T14968] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.712636][T14968] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.730189][T14968] bridge_slave_1: entered allmulticast mode [ 224.745788][T14968] bridge_slave_1: entered promiscuous mode [ 224.772920][T14968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.793900][T14968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.839313][T14968] team0: Port device team_slave_0 added [ 224.859855][T14968] team0: Port device team_slave_1 added [ 224.929989][T14968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.937093][T14968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.963445][T14968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.024879][T15022] loop4: detected capacity change from 0 to 8192 [ 225.092475][T15022] loop4: p1 p3 p4 [ 225.096418][T15022] loop4: p1 size 8390912 extends beyond EOD, truncated [ 225.121542][T15022] loop4: p3 size 589824 extends beyond EOD, truncated [ 225.129528][T14968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.136603][T14968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.162948][T14968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.229400][T15029] atomic_op ffff88811845c128 conn xmit_atomic 0000000000000000 [ 225.293007][T14968] hsr_slave_0: entered promiscuous mode [ 225.314993][T14968] hsr_slave_1: entered promiscuous mode [ 225.331239][T14968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.342273][T14968] Cannot create hsr debugfs directory [ 225.357861][T15031] lo speed is unknown, defaulting to 1000 [ 225.492025][T14968] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.583382][T14968] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.662689][T14968] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.705454][T14968] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.768178][T15063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15063 comm=syz.4.4223 [ 225.781043][T15063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49152 sclass=netlink_route_socket pid=15063 comm=syz.4.4223 [ 225.818203][T14968] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 225.835595][T15068] vlan2: entered promiscuous mode [ 225.852846][T14968] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 225.862043][T14968] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 225.871286][T14968] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 225.934538][T14968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.962418][T14968] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.983293][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.990461][ T7351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.022552][T14968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.033141][T14968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.062359][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.069515][ T7351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.155981][T14968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.338247][T15115] vlan0: entered promiscuous mode [ 226.400448][T14968] veth0_vlan: entered promiscuous mode [ 226.410667][T14968] veth1_vlan: entered promiscuous mode [ 226.453653][T14968] veth0_macvtap: entered promiscuous mode [ 226.474002][T14968] veth1_macvtap: entered promiscuous mode [ 226.500543][T14968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.519336][T14968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.529352][T14968] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.538286][T14968] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.547113][T14968] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.556039][T14968] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.649527][T15131] lo speed is unknown, defaulting to 1000 [ 226.697685][T15133] loop9: detected capacity change from 0 to 2048 [ 226.710570][T15134] loop4: detected capacity change from 0 to 1024 [ 226.754114][T15133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.787874][T15133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.921165][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 226.921183][ T29] audit: type=1400 audit(1750572755.011:5961): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 226.990868][ T29] audit: type=1400 audit(1750572755.041:5962): avc: denied { map_create } for pid=15140 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.010183][ T29] audit: type=1400 audit(1750572755.041:5963): avc: denied { prog_load } for pid=15140 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.029569][ T29] audit: type=1400 audit(1750572755.051:5964): avc: denied { prog_load } for pid=15140 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.048763][ T29] audit: type=1400 audit(1750572755.051:5965): avc: denied { prog_load } for pid=15140 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.067922][ T29] audit: type=1400 audit(1750572755.051:5966): avc: denied { read write } for pid=14682 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.092269][ T29] audit: type=1400 audit(1750572755.051:5967): avc: denied { prog_load } for pid=15140 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.111811][ T29] audit: type=1400 audit(1750572755.051:5968): avc: denied { mounton } for pid=15140 comm="syz.1.4245" path="/907/file0" dev="tmpfs" ino=4755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 227.134602][ T29] audit: type=1400 audit(1750572755.061:5969): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 227.157919][ T29] audit: type=1400 audit(1750572755.071:5970): avc: denied { map_create } for pid=15142 comm="syz.4.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.571323][T15187] lo speed is unknown, defaulting to 1000 [ 227.793387][T15207] __nla_validate_parse: 4 callbacks suppressed [ 227.793405][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4275'. [ 227.837553][T15207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15207 comm=syz.6.4275 [ 228.496036][T15248] lo speed is unknown, defaulting to 1000 [ 228.584404][T15257] lo speed is unknown, defaulting to 1000 [ 228.635198][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4311'. [ 228.682101][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4302'. [ 228.694750][T15262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15262 comm=syz.0.4311 [ 228.713395][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4302'. [ 229.025179][T15298] lo speed is unknown, defaulting to 1000 [ 229.120032][T15303] lo speed is unknown, defaulting to 1000 [ 229.525036][T15348] validate_nla: 3 callbacks suppressed [ 229.525055][T15348] netlink: 'syz.4.4339': attribute type 4 has an invalid length. [ 229.555675][T15348] netlink: 'syz.4.4339': attribute type 4 has an invalid length. [ 229.633486][T15356] --map-set only usable from mangle table [ 229.653585][T15358] lo speed is unknown, defaulting to 1000 [ 229.736298][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 229.857095][T15386] lo speed is unknown, defaulting to 1000 [ 229.868845][T15390] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4359'. [ 230.538958][T15435] lo speed is unknown, defaulting to 1000 [ 230.587775][T15440] lo speed is unknown, defaulting to 1000 [ 230.731448][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4390'. [ 230.874123][T15464] --map-set only usable from mangle table [ 230.974539][T15477] lo speed is unknown, defaulting to 1000 [ 231.297688][T15483] ================================================================== [ 231.305838][T15483] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 231.312278][T15483] [ 231.314611][T15483] write to 0xffffc90003b93bc0 of 4 bytes by task 15478 on cpu 1: [ 231.322338][T15483] pollwake+0xb6/0x100 [ 231.326429][T15483] __wake_up+0x63/0xb0 [ 231.330531][T15483] ep_poll_callback+0x4fe/0x630 [ 231.335402][T15483] __wake_up+0x63/0xb0 [ 231.339583][T15483] ep_poll_callback+0x4fe/0x630 [ 231.344454][T15483] __wake_up+0x63/0xb0 [ 231.348556][T15483] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 231.354131][T15483] __wake_up_sync_key+0x4f/0x80 [ 231.359009][T15483] __unix_dgram_recvmsg+0x3b2/0x840 [ 231.364233][T15483] unix_dgram_recvmsg+0x81/0x90 [ 231.369115][T15483] sock_recvmsg_nosec+0x104/0x130 [ 231.374167][T15483] ____sys_recvmsg+0x26f/0x280 [ 231.378949][T15483] ___sys_recvmsg+0x11f/0x370 [ 231.383641][T15483] do_recvmmsg+0x1ef/0x540 [ 231.388073][T15483] __x64_sys_recvmmsg+0xe5/0x170 [ 231.393031][T15483] x64_sys_call+0x1c6a/0x2fb0 [ 231.397731][T15483] do_syscall_64+0xd2/0x200 [ 231.402250][T15483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.408164][T15483] [ 231.410494][T15483] read to 0xffffc90003b93bc0 of 4 bytes by task 15483 on cpu 0: [ 231.418138][T15483] do_sys_poll+0x99c/0xbd0 [ 231.422598][T15483] __se_sys_ppoll+0x1b9/0x200 [ 231.427300][T15483] __x64_sys_ppoll+0x67/0x80 [ 231.431909][T15483] x64_sys_call+0x2de5/0x2fb0 [ 231.436604][T15483] do_syscall_64+0xd2/0x200 [ 231.441122][T15483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.447034][T15483] [ 231.449366][T15483] value changed: 0x00000000 -> 0x00000001 [ 231.455094][T15483] [ 231.457429][T15483] Reported by Kernel Concurrency Sanitizer on: [ 231.463606][T15483] CPU: 0 UID: 0 PID: 15483 Comm: syz.0.4393 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 231.476127][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.486203][T15483] ================================================================== [ 231.520492][T15491] bond0: (slave syz_tun): Releasing backup interface [ 231.550396][T15491] dummy0: left allmulticast mode [ 231.561810][T15491] bridge0: port 1(dummy0) entered disabled state [ 231.570629][T15491] bond2: (slave ip6erspan0): Releasing active interface [ 231.582113][T15491] bond3: (slave gretap1): Releasing active interface [ 231.589250][T15491] gretap1: left allmulticast mode [ 231.596814][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4400'.