last executing test programs: 1m52.523923952s ago: executing program 32 (id=4667): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m47.116104635s ago: executing program 33 (id=4828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x0, &(0x7f0000001a80), 0x3, 0x5d2, &(0x7f0000001000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) getrusage(0x0, &(0x7f0000000080)) 1m38.816055878s ago: executing program 34 (id=5097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x6a) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x69, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 46.891278352s ago: executing program 6 (id=7003): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, 0x0, 0x65) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}, @local, {[@hopopts={0x87}, @routing={0x3b, 0x2, 0x2, 0x0, 0x700, [@dev={0xfe, 0x80, '\x00', 0x21}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 46.854299256s ago: executing program 6 (id=7005): semop(0x0, &(0x7f0000000000)=[{0x0, 0xb96c, 0x1000}], 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.962390245s ago: executing program 6 (id=7042): socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', @random='\x00\x00\x00\x00\x00 '}) 45.881860683s ago: executing program 6 (id=7045): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 45.756833146s ago: executing program 6 (id=7051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1801c36ba58a544200000000000000000000009500"/31], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/uts\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000023c0)=r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x963cc2, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000057eb4500", @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000900000005000200fc000000"], 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', r7, 0x0, 0x700, 0x4ca, 0x3, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x65, 0x0, 0x7, 0x2b, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0xe, [{@loopback, 0x6}, {@loopback, 0x8}, {@local}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)={0x208, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x8805}, 0x40080) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x108, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x2804c011}, 0x85) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r14, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r14, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 45.436530348s ago: executing program 6 (id=7065): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a3100000000050005000200000005000100060000"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 45.436097458s ago: executing program 35 (id=7065): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a3100000000050005000200000005000100060000"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 38.993847865s ago: executing program 7 (id=7269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14010000290001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_io_uring_setup(0x43b5, &(0x7f0000000540)={0x0, 0xc50e, 0x10000, 0x2, 0x3e8}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x2f, 0x0, 0x0) 38.975549327s ago: executing program 7 (id=7270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 38.848515459s ago: executing program 7 (id=7271): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c000180080001"], 0x30}}, 0x0) 38.847346519s ago: executing program 7 (id=7272): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000b00), 0x1, 0x4a3, &(0x7f0000000580)="$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") ftruncate(0xffffffffffffffff, 0xc17b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x205010, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x8]}) 38.722196112s ago: executing program 7 (id=7277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 38.524863882s ago: executing program 7 (id=7287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 38.476700067s ago: executing program 36 (id=7287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 20.482521663s ago: executing program 5 (id=7876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 20.310235721s ago: executing program 5 (id=7878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) 20.309897041s ago: executing program 5 (id=7879): r0 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 20.027170279s ago: executing program 5 (id=7892): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) 19.984019593s ago: executing program 5 (id=7896): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 19.771206835s ago: executing program 5 (id=7909): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x104) 19.743387497s ago: executing program 37 (id=7909): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x104) 18.151748637s ago: executing program 8 (id=7953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 18.086764444s ago: executing program 8 (id=7956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80}, 0x50) 18.047764958s ago: executing program 8 (id=7958): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 17.735536259s ago: executing program 8 (id=7969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) syz_clone(0x24011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 17.542991129s ago: executing program 8 (id=7975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='task_newtask\x00', r0, 0x0, 0x800000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 17.236666009s ago: executing program 8 (id=7981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) 17.236480889s ago: executing program 38 (id=7981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) 4.337564725s ago: executing program 2 (id=8475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 4.107761038s ago: executing program 2 (id=8480): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xc, 0x1, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000d00)="ae37", 0x2) 4.075245971s ago: executing program 2 (id=8482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.702356908s ago: executing program 2 (id=8487): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 3.538317625s ago: executing program 2 (id=8493): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.500053359s ago: executing program 39 (id=8493): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 794.13912ms ago: executing program 3 (id=8554): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 677.487032ms ago: executing program 3 (id=8560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800000000}, {0x0, 0x2, 0x0, 0x2000000002}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0x0, 0xfffffc01}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 601.080679ms ago: executing program 0 (id=8564): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) recvfrom$inet6(r0, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) 600.344779ms ago: executing program 4 (id=8566): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) 542.993895ms ago: executing program 4 (id=8567): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 542.576405ms ago: executing program 4 (id=8568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000200)="7aa624aface9421f8c826b9405bfdd8ca7f99bc4a79cd93f7b0814c4ef1df7e6f19a5a3725330693a182d63f386796ed716df3b2f7fc4469db534a1165aa500207a6543ef6933c210513d8ae60549deb37e087d1cf926470432f06636f917a76fc2d3d3af91eaf2431bbd3a98e9b8030c662a72f50050cabb6b4ecfe2f3a9754a4ae63b56e1185c32303eb021a54207b286c605505e03590538a6ecd191679cf574ea19d073bbdcc0ecf0daf1abb9d83d2cd8c5298add22f38be5e029b7d3deda99b5b3e2711ec0ceff584539be4f10faf7482512495a505329a5536714ee55e55ae24293fb999", 0xe7) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000180)='./file0\x00', r0}, 0x18) 541.213396ms ago: executing program 3 (id=8569): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 511.871599ms ago: executing program 4 (id=8570): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 489.730191ms ago: executing program 1 (id=8572): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 435.788016ms ago: executing program 4 (id=8573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 435.375437ms ago: executing program 1 (id=8574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x2, 0xf0, 0x4}, {0x0, 0x1}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 408.611489ms ago: executing program 0 (id=8575): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x7a680000) 408.337559ms ago: executing program 9 (id=8576): r0 = syz_io_uring_setup(0x61a1, &(0x7f0000000480)={0x0, 0x9600, 0x0, 0x0, 0x2c3}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x5, 0x4, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 407.997229ms ago: executing program 3 (id=8577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 328.429507ms ago: executing program 1 (id=8578): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 312.451788ms ago: executing program 4 (id=8579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 239.426726ms ago: executing program 0 (id=8580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000001cc0)={0x0, 0xf07d, 0x800, 0x40000, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) 128.647577ms ago: executing program 9 (id=8581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='neigh_update\x00', r0, 0x0, 0x9}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 128.264787ms ago: executing program 3 (id=8582): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="2a00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 128.016607ms ago: executing program 9 (id=8591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 126.315647ms ago: executing program 1 (id=8583): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) unlink(0x0) 114.395149ms ago: executing program 0 (id=8584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 101.5682ms ago: executing program 9 (id=8585): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000129bd7000fedbdf251c00000008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 48.468235ms ago: executing program 1 (id=8586): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) lseek(r2, 0x1, 0x0) 48.227915ms ago: executing program 0 (id=8587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 47.993545ms ago: executing program 1 (id=8588): mknod(0x0, 0x8001420, 0xffffffff) syz_io_uring_setup(0xbda, &(0x7f0000000100)={0x0, 0xec25, 0x8, 0x10000001, 0x40000333}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="00fbfddc0bd5e8dee8d286b20b62086ce9b81b1660031b9dcba026117a79eba4a32d50e5c7b14c8e3f4d"], 0x1, 0x3ea, &(0x7f0000000c40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000005e0001008e57ce5bf9dbed56000000000000000003000000000000"], 0x18}], 0x1}, 0x0) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') prctl$PR_SET_NAME(0xf, 0x0) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00003700040000000800000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r2, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000300)=0x9, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) link(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file0\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 30.553617ms ago: executing program 0 (id=8589): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0xe4, 0x183000, 0x12345}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 29.942077ms ago: executing program 9 (id=8600): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x385e}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, 0x0, 0x91, 0x20008800, 0x0, 0x0) 482.67µs ago: executing program 3 (id=8590): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x5) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:var_lock_t:s0\x00', 0x20) fallocate(r1, 0x20, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 9 (id=8602): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7fe4feb4f6c9 code=0x7ffc0000 [ 339.774141][ T4806] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 339.803331][ T29] audit: type=1326 audit(339.663:17457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23219 comm="syz.7.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4feb4f6c9 code=0x7ffc0000 [ 339.826534][ T29] audit: type=1326 audit(339.663:17458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23219 comm="syz.7.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4feb4f6c9 code=0x7ffc0000 [ 339.849702][ T29] audit: type=1326 audit(339.663:17459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23219 comm="syz.7.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4feb4f6c9 code=0x7ffc0000 [ 339.984904][T23246] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 340.106330][T23266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7007'. [ 340.164292][T23278] rdma_op ffff888111907580 conn xmit_rdma 0000000000000000 [ 340.231752][T23285] netlink: 'syz.7.7014': attribute type 11 has an invalid length. [ 340.387021][T23307] bridge0: port 3(gretap0) entered blocking state [ 340.393605][T23307] bridge0: port 3(gretap0) entered disabled state [ 340.400699][T23307] gretap0: entered allmulticast mode [ 340.409865][T23307] gretap0: entered promiscuous mode [ 340.415579][T23307] bridge0: port 3(gretap0) entered blocking state [ 340.422076][T23307] bridge0: port 3(gretap0) entered forwarding state [ 340.466536][T23308] gretap0: left allmulticast mode [ 340.471883][T23308] gretap0: left promiscuous mode [ 340.477110][T23308] bridge0: port 3(gretap0) entered disabled state [ 341.046832][T23359] loop6: detected capacity change from 0 to 512 [ 341.055372][T23359] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.7045: corrupted in-inode xattr: invalid ea_ino [ 341.069861][T23359] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7045: couldn't read orphan inode 15 (err -117) [ 341.082602][T23359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.135747][T23359] loop6: detected capacity change from 512 to 0 [ 341.142658][T23359] EXT4-fs error (device loop6): ext4_get_inode_loc:4970: inode #12: block 7: comm syz.6.7045: unable to read itable block [ 341.155844][T23359] buffer_io_error: 18 callbacks suppressed [ 341.155862][T23359] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 341.170223][T23359] EXT4-fs (loop6): I/O error while writing superblock [ 341.190812][T18041] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 341.216227][T18921] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4955: inode #18: block 9: comm kworker/u8:64: unable to read itable block [ 341.230520][T18921] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 341.238929][T18921] EXT4-fs (loop6): I/O error while writing superblock [ 341.246534][T18921] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4955: inode #12: block 7: comm kworker/u8:64: unable to read itable block [ 341.260548][T18921] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 341.269218][T18921] EXT4-fs (loop6): I/O error while writing superblock [ 341.276733][T18041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.286755][T18041] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 341.295139][T18041] EXT4-fs (loop6): I/O error while writing superblock [ 341.481141][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.526837][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.546353][T23402] IPVS: Unknown mcast interface: [ 341.589227][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.639171][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.733676][T23406] lo speed is unknown, defaulting to 1000 [ 341.880254][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.900147][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.910442][ T31] bond0 (unregistering): Released all slaves [ 341.997646][ T31] tipc: Left network mode [ 342.007979][T23406] chnl_net:caif_netlink_parms(): no params data found [ 342.139556][ T31] hsr_slave_0: left promiscuous mode [ 342.146209][ T31] hsr_slave_1: left promiscuous mode [ 342.152204][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.159764][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.172949][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.180430][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.195776][ T31] veth1_macvtap: left promiscuous mode [ 342.201340][ T31] veth0_macvtap: left promiscuous mode [ 342.206955][ T31] veth1_vlan: left promiscuous mode [ 342.212244][ T31] veth0_vlan: left promiscuous mode [ 342.293415][ T31] team0 (unregistering): Port device team_slave_1 removed [ 342.309001][ T31] team0 (unregistering): Port device team_slave_0 removed [ 342.348300][T18921] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.358031][T23406] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.365126][T23406] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.374112][T23406] bridge_slave_0: entered allmulticast mode [ 342.381557][T23406] bridge_slave_0: entered promiscuous mode [ 342.389046][T23406] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.396153][T23406] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.403279][T23406] bridge_slave_1: entered allmulticast mode [ 342.409970][T23406] bridge_slave_1: entered promiscuous mode [ 342.427003][T23500] pimreg: entered allmulticast mode [ 342.442023][T23406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.454717][T23406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.463999][T23500] pimreg: left allmulticast mode [ 342.500662][T23406] team0: Port device team_slave_0 added [ 342.510117][T23406] team0: Port device team_slave_1 added [ 342.549232][T23406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.556326][T23406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.582284][T23406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.596619][T23406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.603633][T23406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.629575][T23406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.660653][T23406] hsr_slave_0: entered promiscuous mode [ 342.667180][T23406] hsr_slave_1: entered promiscuous mode [ 342.673564][T23406] debugfs: 'hsr0' already exists in 'hsr' [ 342.679388][T23406] Cannot create hsr debugfs directory [ 342.795973][T23406] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 342.805310][T23406] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 342.815040][T23406] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 342.825845][T23406] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 342.883565][T23406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.903038][T23406] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.940512][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.947651][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.959713][T18929] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.966853][T18929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.060514][T23406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.204709][T23406] veth0_vlan: entered promiscuous mode [ 343.213229][T23406] veth1_vlan: entered promiscuous mode [ 343.231714][T23406] veth0_macvtap: entered promiscuous mode [ 343.239442][T23406] veth1_macvtap: entered promiscuous mode [ 343.252432][T23406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.266128][T23406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.278093][T18879] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.287239][T18879] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.296832][T18879] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.305581][T18879] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.880790][T23619] xt_hashlimit: max too large, truncated to 1048576 [ 343.941627][T23625] warn_alloc: 12 callbacks suppressed [ 343.941646][T23625] syz.1.7152: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 343.961868][T23625] CPU: 0 UID: 0 PID: 23625 Comm: syz.1.7152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.961905][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.961922][T23625] Call Trace: [ 343.961930][T23625] [ 343.961939][T23625] __dump_stack+0x1d/0x30 [ 343.961965][T23625] dump_stack_lvl+0xe8/0x140 [ 343.962005][T23625] dump_stack+0x15/0x1b [ 343.962022][T23625] warn_alloc+0x12b/0x1a0 [ 343.962107][T23625] ? __rcu_read_unlock+0x4f/0x70 [ 343.962244][T23625] __vmalloc_node_range_noprof+0x9d/0xed0 [ 343.962353][T23625] ? __futex_wait+0x1fa/0x260 [ 343.962417][T23625] ? __pfx_futex_wake_mark+0x10/0x10 [ 343.962436][T23625] ? __rcu_read_unlock+0x4f/0x70 [ 343.962470][T23625] ? avc_has_perm_noaudit+0x1b1/0x200 [ 343.962490][T23625] ? should_fail_ex+0x30/0x280 [ 343.962580][T23625] ? xskq_create+0x36/0xe0 [ 343.962605][T23625] vmalloc_user_noprof+0x7d/0xb0 [ 343.962691][T23625] ? xskq_create+0x80/0xe0 [ 343.962712][T23625] xskq_create+0x80/0xe0 [ 343.962734][T23625] xsk_init_queue+0x95/0xf0 [ 343.962760][T23625] xsk_setsockopt+0x3f5/0x640 [ 343.962848][T23625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.962872][T23625] __sys_setsockopt+0x184/0x200 [ 343.962953][T23625] __x64_sys_setsockopt+0x64/0x80 [ 343.963075][T23625] x64_sys_call+0x20ec/0x3000 [ 343.963155][T23625] do_syscall_64+0xd2/0x200 [ 343.963175][T23625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.963204][T23625] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 343.963245][T23625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.963266][T23625] RIP: 0033:0x7ff6561cf6c9 [ 343.963281][T23625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.963304][T23625] RSP: 002b:00007ff654c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.963323][T23625] RAX: ffffffffffffffda RBX: 00007ff656425fa0 RCX: 00007ff6561cf6c9 [ 343.963335][T23625] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 343.963347][T23625] RBP: 00007ff656251f91 R08: 0000000000000004 R09: 0000000000000000 [ 343.963394][T23625] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.963406][T23625] R13: 00007ff656426038 R14: 00007ff656425fa0 R15: 00007ffc19f0b818 [ 343.963426][T23625] [ 343.963432][T23625] Mem-Info: [ 344.192157][T23625] active_anon:50454 inactive_anon:16 isolated_anon:0 [ 344.192157][T23625] active_file:9089 inactive_file:20946 isolated_file:0 [ 344.192157][T23625] unevictable:0 dirty:225 writeback:0 [ 344.192157][T23625] slab_reclaimable:3838 slab_unreclaimable:49312 [ 344.192157][T23625] mapped:29076 shmem:42291 pagetables:1499 [ 344.192157][T23625] sec_pagetables:0 bounce:0 [ 344.192157][T23625] kernel_misc_reclaimable:0 [ 344.192157][T23625] free:1792523 free_pcp:7118 free_cma:0 [ 344.237358][T23625] Node 0 active_anon:201700kB inactive_anon:64kB active_file:36356kB inactive_file:83784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116304kB dirty:900kB writeback:0kB shmem:169164kB kernel_stack:4592kB pagetables:6112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.265158][T23625] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.294821][T23625] lowmem_reserve[]: 0 2881 7859 7859 [ 344.300191][T23625] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 344.331622][T23625] lowmem_reserve[]: 0 0 4978 4978 [ 344.336795][T23625] Node 0 Normal free:4207772kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:201700kB inactive_anon:64kB active_file:36356kB inactive_file:83784kB unevictable:0kB writepending:900kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:24836kB local_pcp:1892kB free_cma:0kB [ 344.369934][T23625] lowmem_reserve[]: 0 0 0 0 [ 344.374534][T23625] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.387294][T23625] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 344.389555][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.403586][T23625] Node 0 Normal: 2*4kB (UE) 0*8kB 160*16kB (UM) 848*32kB (UME) 534*64kB (ME) 394*128kB (UME) 214*256kB (UME) 168*512kB (UME) 148*1024kB (UM) 80*2048kB (UME) 888*4096kB (UM) = 4207752kB [ 344.410055][ T4806] Bluetooth: hci0: command 0x1003 tx timeout [ 344.428225][T23625] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 344.443517][T23625] 72342 total pagecache pages [ 344.448291][T23625] 38 pages in swap cache [ 344.452634][T23625] Free swap = 116708kB [ 344.456826][T23625] Total swap = 124996kB [ 344.460995][T23625] 2097051 pages RAM [ 344.464818][T23625] 0 pages HighMem/MovableOnly [ 344.469578][T23625] 81087 pages reserved [ 344.597778][T23647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23647 comm=syz.1.7160 [ 344.666997][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 344.667016][ T29] audit: type=1326 audit(344.653:17585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23652 comm="syz.1.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 344.696427][ T29] audit: type=1326 audit(344.653:17586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23652 comm="syz.1.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 344.740016][ T29] audit: type=1326 audit(344.703:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23652 comm="syz.1.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 344.763220][ T29] audit: type=1326 audit(344.703:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23652 comm="syz.1.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 344.786263][ T29] audit: type=1326 audit(344.703:17589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23652 comm="syz.1.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 344.869457][ T29] audit: type=1400 audit(344.853:17590): avc: denied { mount } for pid=23664 comm="syz.1.7170" name="/" dev="ramfs" ino=72132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 344.929577][T23672] bridge0: port 3(gretap0) entered blocking state [ 344.936128][T23672] bridge0: port 3(gretap0) entered disabled state [ 344.943884][T23672] gretap0: entered allmulticast mode [ 344.962075][T23672] gretap0: entered promiscuous mode [ 344.972569][T23672] gretap0: left allmulticast mode [ 344.977827][T23672] gretap0: left promiscuous mode [ 344.983025][T23672] bridge0: port 3(gretap0) entered disabled state [ 345.004070][T23676] netlink: 'syz.5.7171': attribute type 3 has an invalid length. [ 345.136169][T23682] __nla_validate_parse: 9 callbacks suppressed [ 345.136255][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7178'. [ 345.157563][T23682] bond0: Invalid ad_actor_system MAC address. [ 345.163910][T23682] bond0: option ad_actor_system: invalid value (1) [ 345.171067][T23682] bond0 (unregistering): Released all slaves [ 345.525587][ T29] audit: type=1326 audit(345.503:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23693 comm="syz.8.7182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc383caf6c9 code=0x0 [ 345.758202][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 345.765516][ T29] audit: type=1400 audit(345.743:17592): avc: denied { ioctl } for pid=23697 comm="syz.7.7183" path="socket:[72177]" dev="sockfs" ino=72177 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.876107][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7184'. [ 345.886185][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7184'. [ 345.914959][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7185'. [ 345.952917][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7185'. [ 346.124870][T23720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7194'. [ 346.134077][T23720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7194'. [ 346.293264][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7202'. [ 346.399195][T23751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7208'. [ 346.419638][T23757] vcan0: entered allmulticast mode [ 346.425340][T23757] vcan0: left allmulticast mode [ 346.450115][T23761] xt_hashlimit: max too large, truncated to 1048576 [ 346.559105][ T29] audit: type=1400 audit(346.543:17593): avc: denied { bind } for pid=23778 comm="syz.8.7222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.578291][ T29] audit: type=1400 audit(346.543:17594): avc: denied { listen } for pid=23778 comm="syz.8.7222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.648846][T23792] loop8: detected capacity change from 0 to 164 [ 346.656373][T23792] Unable to read rock-ridge attributes [ 346.662691][T23792] Unable to read rock-ridge attributes [ 346.682201][T23796] netlink: 'syz.5.7230': attribute type 12 has an invalid length. [ 347.008620][T23826] macvtap0: refused to change device tx_queue_len [ 347.163195][T23840] loop8: detected capacity change from 0 to 1024 [ 347.172548][T23840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.188790][T23840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.384835][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.485005][T23868] Timeout policy `syz1' can only be used by L3 protocol number 24578 [ 347.835910][ T4806] Bluetooth: hci0: command 0x1003 tx timeout [ 347.841973][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 348.106429][T23896] loop7: detected capacity change from 0 to 512 [ 348.127682][T23896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.185766][T23896] loop7: detected capacity change from 512 to 64 [ 348.204466][T18694] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 4: comm syz-executor: path /382/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 348.227405][T23907] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7275'. [ 348.236673][T23907] 0ªX¹¦À: renamed from caif0 [ 348.245215][T23907] 0ªX¹¦À: entered allmulticast mode [ 348.250691][T23907] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 348.271408][T18694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.388435][T23923] tipc: Started in network mode [ 348.393353][T23923] tipc: Node identity ac14140f, cluster identity 4711 [ 348.400419][T23923] tipc: New replicast peer: 255.255.255.255 [ 348.406505][T23923] tipc: Enabled bearer , priority 10 [ 348.413656][T23923] tipc: Disabling bearer [ 348.424704][T18921] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.500543][T18921] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.589175][T18921] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.649735][T18921] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.735024][T23932] lo speed is unknown, defaulting to 1000 [ 348.777518][T18921] bridge_slave_1: left allmulticast mode [ 348.783218][T18921] bridge_slave_1: left promiscuous mode [ 348.788955][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.798041][T18921] bridge_slave_0: left allmulticast mode [ 348.803753][T18921] bridge_slave_0: left promiscuous mode [ 348.809560][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.928358][T18921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.938737][T18921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.949023][T18921] bond0 (unregistering): Released all slaves [ 348.990532][T18921] tipc: Disabling bearer [ 348.995718][T18921] tipc: Left network mode [ 349.023212][T23932] chnl_net:caif_netlink_parms(): no params data found [ 349.057370][T18921] hsr_slave_0: left promiscuous mode [ 349.063177][T18921] hsr_slave_1: left promiscuous mode [ 349.071314][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.078832][T18921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.086457][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.093862][T18921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.103975][T18921] veth1_macvtap: left promiscuous mode [ 349.109543][T18921] veth0_macvtap: left promiscuous mode [ 349.115117][T18921] veth1_vlan: left promiscuous mode [ 349.120396][T18921] veth0_vlan: left promiscuous mode [ 349.194907][T18921] team0 (unregistering): Port device team_slave_1 removed [ 349.207631][T18921] team0 (unregistering): Port device team_slave_0 removed [ 349.270600][T23932] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.278045][T23932] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.285514][T23932] bridge_slave_0: entered allmulticast mode [ 349.292476][T23932] bridge_slave_0: entered promiscuous mode [ 349.300010][T23932] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.307137][T23932] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.314449][T23932] bridge_slave_1: entered allmulticast mode [ 349.321039][T23932] bridge_slave_1: entered promiscuous mode [ 349.339502][T23932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.350282][T23932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.370668][T23932] team0: Port device team_slave_0 added [ 349.377585][T23932] team0: Port device team_slave_1 added [ 349.394254][T23932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.401270][T23932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.427217][T23932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.438845][T23932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.445953][T23932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.471902][T23932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.513248][T23932] hsr_slave_0: entered promiscuous mode [ 349.519947][T23932] hsr_slave_1: entered promiscuous mode [ 349.526266][T23932] debugfs: 'hsr0' already exists in 'hsr' [ 349.532048][T23932] Cannot create hsr debugfs directory [ 349.619951][T23989] loop8: detected capacity change from 0 to 1024 [ 349.626941][T23989] EXT4-fs: Ignoring removed bh option [ 349.633544][T23989] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 349.647738][T23989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.684630][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.729883][T23932] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 349.747155][T23932] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 349.760925][T23932] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 349.770541][T23932] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 349.869304][T23932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.898911][T23932] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.918314][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.925415][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.978547][T23932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.989168][T23932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.018740][T18879] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.025937][T18879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.112507][T23932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.190131][T24051] __nla_validate_parse: 6 callbacks suppressed [ 350.190151][T24051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7330'. [ 350.314664][T23932] veth0_vlan: entered promiscuous mode [ 350.329182][T23932] veth1_vlan: entered promiscuous mode [ 350.356911][T23932] veth0_macvtap: entered promiscuous mode [ 350.364903][T23932] veth1_macvtap: entered promiscuous mode [ 350.377815][T24078] netlink: 7576 bytes leftover after parsing attributes in process `syz.1.7339'. [ 350.388717][T23932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.403166][T23932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.427463][ T52] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.454647][T18921] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.464754][T18921] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.478972][T18921] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.493263][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 350.493332][ T29] audit: type=1326 audit(350.473:17649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.542867][ T29] audit: type=1326 audit(350.473:17650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.565993][ T29] audit: type=1326 audit(350.513:17651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.589040][ T29] audit: type=1326 audit(350.513:17652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.612088][ T29] audit: type=1326 audit(350.513:17653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.635068][ T29] audit: type=1326 audit(350.513:17654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.658124][ T29] audit: type=1326 audit(350.513:17655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.681165][ T29] audit: type=1326 audit(350.513:17656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.704168][ T29] audit: type=1326 audit(350.513:17657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.727254][ T29] audit: type=1326 audit(350.513:17658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.8.7344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383caf6c9 code=0x7ffc0000 [ 350.824920][T24109] netlink: 444 bytes leftover after parsing attributes in process `syz.3.7352'. [ 350.873230][T24109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7352'. [ 350.892278][T24124] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.902318][T24124] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.957304][T24124] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.967162][T24124] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.067253][T24124] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.077098][T24124] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.117599][T24124] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.127562][T24124] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.195691][T18879] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.203957][T18879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.225414][T18879] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.233771][T18879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.242683][T18879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.250993][T18879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.259459][T18879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.267693][T18879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.465001][T24169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7378'. [ 351.578107][ T2967] kernel write not supported for file bpf-prog (pid: 2967 comm: kworker/0:2) [ 351.903898][T24210] netlink: 'syz.8.7396': attribute type 3 has an invalid length. [ 352.071836][T24220] loop9: detected capacity change from 0 to 512 [ 352.079227][T24220] msdos: Bad value for 'errors' [ 352.316461][T24230] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7404'. [ 352.327562][T24230] IPVS: Error connecting to the multicast addr [ 352.384465][T24234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.394229][T24234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.609094][T24252] netlink: 'syz.3.7414': attribute type 3 has an invalid length. [ 353.003765][T24287] loop9: detected capacity change from 0 to 1024 [ 353.010762][T24287] EXT4-fs: Ignoring removed nobh option [ 353.036752][T24287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.056895][T24287] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 353.108223][T23932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.259160][T24306] loop8: detected capacity change from 0 to 1024 [ 353.267221][T24306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.277893][T24306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.377296][T24104] IPVS: starting estimator thread 0... [ 353.466109][T24318] IPVS: using max 2304 ests per chain, 115200 per kthread [ 353.504671][T24337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7451'. [ 353.644703][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.818596][T24368] netlink: 'syz.8.7465': attribute type 1 has an invalid length. [ 353.917341][T24378] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 354.040109][T24396] netlink: 'syz.9.7477': attribute type 3 has an invalid length. [ 354.078557][T24403] loop8: detected capacity change from 0 to 1024 [ 354.087933][T24403] EXT4-fs (loop8): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 354.098058][T24402] loop9: detected capacity change from 0 to 512 [ 354.107515][T24402] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 354.108986][T24403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.123050][T24402] EXT4-fs (loop9): mount failed [ 354.164764][T24409] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 354.202806][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.221700][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7485'. [ 354.277757][T24422] warn_alloc: 10 callbacks suppressed [ 354.277773][T24422] syz.9.7489: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 354.288446][ T2967] usb usb6-port1: attempt power cycle [ 354.298012][T24422] CPU: 1 UID: 0 PID: 24422 Comm: syz.9.7489 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.298113][T24422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.298131][T24422] Call Trace: [ 354.298143][T24422] [ 354.298156][T24422] __dump_stack+0x1d/0x30 [ 354.298190][T24422] dump_stack_lvl+0xe8/0x140 [ 354.298223][T24422] dump_stack+0x15/0x1b [ 354.298250][T24422] warn_alloc+0x12b/0x1a0 [ 354.298297][T24422] ? __rcu_read_unlock+0x4f/0x70 [ 354.298363][T24422] __vmalloc_node_range_noprof+0x9d/0xed0 [ 354.298417][T24422] ? probe_sched_wakeup+0x85/0xa0 [ 354.298566][T24422] ? ttwu_do_activate+0x1d0/0x210 [ 354.298598][T24422] ? __rcu_read_unlock+0x4f/0x70 [ 354.298695][T24422] ? avc_has_perm_noaudit+0x1b1/0x200 [ 354.298728][T24422] ? should_fail_ex+0x30/0x280 [ 354.298756][T24422] ? xskq_create+0x36/0xe0 [ 354.298794][T24422] vmalloc_user_noprof+0x7d/0xb0 [ 354.298858][T24422] ? xskq_create+0x80/0xe0 [ 354.298893][T24422] xskq_create+0x80/0xe0 [ 354.298928][T24422] xsk_init_queue+0x95/0xf0 [ 354.298963][T24422] xsk_setsockopt+0x3f5/0x640 [ 354.299017][T24422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 354.299049][T24422] __sys_setsockopt+0x184/0x200 [ 354.299103][T24422] __x64_sys_setsockopt+0x64/0x80 [ 354.299163][T24422] x64_sys_call+0x20ec/0x3000 [ 354.299198][T24422] do_syscall_64+0xd2/0x200 [ 354.299231][T24422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 354.299332][T24422] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 354.299386][T24422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.299420][T24422] RIP: 0033:0x7fd1919ef6c9 [ 354.299446][T24422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.299546][T24422] RSP: 002b:00007fd190457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 354.299574][T24422] RAX: ffffffffffffffda RBX: 00007fd191c45fa0 RCX: 00007fd1919ef6c9 [ 354.299594][T24422] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 354.299613][T24422] RBP: 00007fd191a71f91 R08: 0000000000000004 R09: 0000000000000000 [ 354.299632][T24422] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.299650][T24422] R13: 00007fd191c46038 R14: 00007fd191c45fa0 R15: 00007ffdb40d3488 [ 354.299682][T24422] [ 354.299692][T24422] Mem-Info: [ 354.531071][T24422] active_anon:46409 inactive_anon:19 isolated_anon:0 [ 354.531071][T24422] active_file:9089 inactive_file:20952 isolated_file:0 [ 354.531071][T24422] unevictable:0 dirty:260 writeback:0 [ 354.531071][T24422] slab_reclaimable:3880 slab_unreclaimable:48076 [ 354.531071][T24422] mapped:29070 shmem:42369 pagetables:1437 [ 354.531071][T24422] sec_pagetables:0 bounce:0 [ 354.531071][T24422] kernel_misc_reclaimable:0 [ 354.531071][T24422] free:1796056 free_pcp:10006 free_cma:0 [ 354.576340][T24422] Node 0 active_anon:185636kB inactive_anon:76kB active_file:36356kB inactive_file:83808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116280kB dirty:1040kB writeback:0kB shmem:169476kB kernel_stack:4640kB pagetables:5748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 354.604013][T24422] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.633727][T24422] lowmem_reserve[]: 0 2881 7859 7859 [ 354.639115][T24422] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 354.670197][T24422] lowmem_reserve[]: 0 0 4978 4978 [ 354.675424][T24422] Node 0 Normal free:4222136kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:185636kB inactive_anon:76kB active_file:36356kB inactive_file:83808kB unevictable:0kB writepending:1040kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:36496kB local_pcp:17940kB free_cma:0kB [ 354.708863][T24422] lowmem_reserve[]: 0 0 0 0 [ 354.713597][T24422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 354.726374][T24422] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 354.742437][T24422] Node 0 Normal: 3034*4kB (UME) 989*8kB (UM) 739*16kB (ME) 591*32kB (M) 544*64kB (UME) 284*128kB (UME) 171*256kB (UME) 177*512kB (UME) 155*1024kB (UM) 83*2048kB (UME) 888*4096kB (UM) = 4222304kB [ 354.761891][T24422] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 354.771234][T24422] 72422 total pagecache pages [ 354.775934][T24422] 41 pages in swap cache [ 354.780179][T24422] Free swap = 116696kB [ 354.784329][T24422] Total swap = 124996kB [ 354.788529][T24422] 2097051 pages RAM [ 354.792336][T24422] 0 pages HighMem/MovableOnly [ 354.797028][T24422] 81087 pages reserved [ 354.834889][T24430] netlink: 'syz.9.7491': attribute type 3 has an invalid length. [ 354.918614][T24443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7496'. [ 355.065257][T24459] @: renamed from vlan0 (while UP) [ 355.189830][T24467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24467 comm=syz.8.7508 [ 355.326240][T24479] tipc: New replicast peer: 255.255.255.32 [ 355.332324][T24479] tipc: Enabled bearer , priority 10 [ 355.354983][T24479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7514'. [ 355.364056][T24479] tipc: Disabling bearer [ 355.435658][T24488] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 355.435658][T24488] program syz.8.7517 not setting count and/or reply_len properly [ 355.588095][T24501] loop9: detected capacity change from 0 to 512 [ 355.597500][T24501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.611049][T24501] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.696720][T24506] loop9: detected capacity change from 0 to 512 [ 355.704282][T24506] EXT4-fs: Ignoring removed nobh option [ 355.726627][T24506] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.7524: corrupted inode contents [ 355.739889][T24506] EXT4-fs (loop9): Remounting filesystem read-only [ 355.747691][T24506] __quota_error: 52 callbacks suppressed [ 355.747708][T24506] Quota error (device loop9): write_blk: dquota write failed [ 355.761969][T24506] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 355.788266][T24506] EXT4-fs (loop9): 1 truncate cleaned up [ 355.794633][T24506] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.826989][T24506] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.983052][ T29] audit: type=1400 audit(355.963:17710): avc: denied { read } for pid=24528 comm="syz.9.7534" lport=36462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.443955][ T2967] usb usb6-port1: unable to enumerate USB device [ 356.450986][T24238] vhci_hcd: invalid port number 96 [ 356.456248][T24238] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 356.509471][T18879] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.635358][T24567] uprobe: syz.3.7548:24567 failed to unregister, leaking uprobe [ 356.726840][T24565] uprobe: syz.3.7548:24565 failed to unregister, leaking uprobe [ 357.134825][ T29] audit: type=1326 audit(357.113:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.193159][ T29] audit: type=1326 audit(357.173:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.254515][ T29] audit: type=1326 audit(357.183:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.277598][ T29] audit: type=1326 audit(357.183:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.300692][ T29] audit: type=1326 audit(357.183:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.323767][ T29] audit: type=1326 audit(357.183:17716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.346927][ T29] audit: type=1326 audit(357.183:17717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d18bff6c9 code=0x7ffc0000 [ 357.570338][T24615] lo speed is unknown, defaulting to 1000 [ 357.970518][T24641] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7583'. [ 358.122337][T24660] macsec1: entered promiscuous mode [ 358.127649][T24660] bridge0: entered promiscuous mode [ 358.133543][T24660] bridge0: port 2(macsec1) entered blocking state [ 358.140447][T24660] bridge0: port 2(macsec1) entered disabled state [ 358.148708][T24660] macsec1: entered allmulticast mode [ 358.154076][T24660] bridge0: entered allmulticast mode [ 358.160372][T24660] macsec1: left allmulticast mode [ 358.165794][T24660] bridge0: left allmulticast mode [ 358.173122][T24660] bridge0: left promiscuous mode [ 358.285081][T24683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7602'. [ 358.296690][T24688] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7604'. [ 358.308176][T24688] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7604'. [ 358.379344][T24698] loop9: detected capacity change from 0 to 128 [ 358.388846][T24698] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 358.421427][T23932] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.545903][ T4806] Bluetooth: hci0: command 0x1003 tx timeout [ 358.546307][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 358.647261][T24719] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 358.735219][T24721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7617'. [ 358.744421][T24721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7617'. [ 358.765872][T24721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7617'. [ 358.774896][T24721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7617'. [ 358.844648][T24721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7617'. [ 359.282133][T24767] loop9: detected capacity change from 0 to 512 [ 359.326740][T24767] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.350496][T24767] EXT4-fs (loop9): mount failed [ 359.754127][T24799] geneve2: entered promiscuous mode [ 359.759508][T24799] geneve2: entered allmulticast mode [ 359.777648][ T52] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.790604][ T52] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.800090][ T52] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.809215][ T52] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.916338][T24813] wg2: entered promiscuous mode [ 359.921277][T24813] wg2: entered allmulticast mode [ 360.016434][T24821] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.088482][T24828] loop8: detected capacity change from 0 to 512 [ 360.106740][T24828] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 360.136021][T24828] EXT4-fs (loop8): 1 truncate cleaned up [ 360.143069][T24828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.188508][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.291387][T24844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24844 comm=syz.8.7669 [ 360.344511][T24849] loop8: detected capacity change from 0 to 512 [ 360.356083][T24849] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.7671: error while reading EA inode 32 err=-116 [ 360.368818][T24849] EXT4-fs (loop8): Remounting filesystem read-only [ 360.375386][T24849] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 360.386087][T24849] EXT4-fs (loop8): 1 orphan inode deleted [ 360.392203][T24849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.437119][T24852] loop9: detected capacity change from 0 to 1024 [ 360.457804][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.481438][T24852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 360.523078][T24852] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.7672: lblock 0 mapped to illegal pblock 0 (length 1) [ 360.556930][T24852] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 360.569297][T24852] EXT4-fs (loop9): This should not happen!! Data will be lost [ 360.569297][T24852] [ 360.603874][T24867] serio: Serial port ttyS3 [ 360.616174][T24865] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: comm syz.9.7672: lblock 0 mapped to illegal pblock 0 (length 1) [ 360.666877][T23932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 360.826143][T24893] __nla_validate_parse: 4 callbacks suppressed [ 360.826164][T24893] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7688'. [ 361.252205][T24928] cgroup: Unknown subsys name 'cpuset' [ 361.302380][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 361.302474][ T29] audit: type=1326 audit(361.283:17865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.313025][T24922] lo speed is unknown, defaulting to 1000 [ 361.339072][ T29] audit: type=1326 audit(361.323:17866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.362158][ T29] audit: type=1326 audit(361.323:17867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.385241][ T29] audit: type=1326 audit(361.323:17868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.408366][ T29] audit: type=1326 audit(361.323:17869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.431502][ T29] audit: type=1326 audit(361.323:17870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.454722][ T29] audit: type=1326 audit(361.323:17871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.477966][ T29] audit: type=1326 audit(361.323:17872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.502998][ T29] audit: type=1326 audit(361.323:17873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.526038][ T29] audit: type=1326 audit(361.323:17874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1919ef6c9 code=0x7ffc0000 [ 361.577138][T24944] xt_hashlimit: max too large, truncated to 1048576 [ 361.891012][ T23] IPVS: starting estimator thread 0... [ 361.985991][T24983] IPVS: using max 2304 ests per chain, 115200 per kthread [ 361.991285][T24998] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7738'. [ 362.132835][ T2967] hid_parser_main: 21 callbacks suppressed [ 362.132995][ T2967] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.153476][ T2967] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.374133][T25033] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.384607][T25033] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.440673][T25033] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.451017][T25033] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.502063][T25033] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.512443][T25033] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.524522][T25045] loop9: detected capacity change from 0 to 7 [ 362.530955][T25045] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.539067][T25045] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.546997][T25045] loop9: unable to read partition table [ 362.573228][T25045] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 362.573228][T25045] ) failed (rc=-5) [ 362.575940][T25048] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7759'. [ 362.602711][T25033] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.613122][T25033] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.669865][T25054] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7761'. [ 363.208850][T18929] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.217322][T18929] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.244713][T18929] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.253121][T18929] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.267206][T25106] netlink: 'syz.9.7764': attribute type 3 has an invalid length. [ 363.271558][T18929] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.283379][T18929] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.291818][T18929] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.300223][T18929] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.489465][T25120] loop8: detected capacity change from 0 to 1024 [ 363.496497][T25120] EXT4-fs: Ignoring removed orlov option [ 363.512708][T25120] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 363.539639][T25120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.564586][T25120] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 363.577081][T25120] EXT4-fs (loop8): This should not happen!! Data will be lost [ 363.577081][T25120] [ 363.586959][T25120] EXT4-fs (loop8): Total free blocks count 0 [ 363.592961][T25120] EXT4-fs (loop8): Free/Dirty block details [ 363.598923][T25120] EXT4-fs (loop8): free_blocks=0 [ 363.603878][T25120] EXT4-fs (loop8): dirty_blocks=0 [ 363.608960][T25120] EXT4-fs (loop8): Block reservation details [ 363.614952][T25120] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 363.636546][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.667839][T25130] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 363.732419][T25138] loop8: detected capacity change from 0 to 512 [ 363.742063][T25138] EXT4-fs: Ignoring removed orlov option [ 363.756331][T25138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 363.764367][T25138] System zones: 1-12 [ 363.769461][T25138] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.7778: corrupted in-inode xattr: e_value size too large [ 363.784404][T25138] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.7778: couldn't read orphan inode 15 (err -117) [ 363.790088][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7780'. [ 363.797302][T25138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.812131][T25144] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7780'. [ 363.829716][T25138] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7778: bg 0: block 424: padding at end of block bitmap is not set [ 363.859053][T23406] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.957136][T25157] cgroup: Unknown subsys name 'cpuset' [ 363.986576][T25159] netlink: 'syz.9.7788': attribute type 1 has an invalid length. [ 364.245038][T25191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25191 comm=syz.8.7799 [ 364.259710][T25191] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7799'. [ 364.281963][T25195] loop9: detected capacity change from 0 to 136 [ 364.290674][T25195] rock: directory entry would overflow storage [ 364.296957][T25195] rock: sig=0x4f50, size=4, remaining=3 [ 364.302679][T25195] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 364.375105][T25210] warn_alloc: 15 callbacks suppressed [ 364.375197][T25210] syz.1.7811: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 364.395369][T25210] CPU: 1 UID: 0 PID: 25210 Comm: syz.1.7811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 364.395400][T25210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.395417][T25210] Call Trace: [ 364.395423][T25210] [ 364.395431][T25210] __dump_stack+0x1d/0x30 [ 364.395519][T25210] dump_stack_lvl+0xe8/0x140 [ 364.395538][T25210] dump_stack+0x15/0x1b [ 364.395555][T25210] warn_alloc+0x12b/0x1a0 [ 364.395683][T25210] ? __rcu_read_unlock+0x4f/0x70 [ 364.395743][T25210] __vmalloc_node_range_noprof+0x9d/0xed0 [ 364.395775][T25210] ? __futex_wait+0x1fa/0x260 [ 364.395796][T25210] ? __pfx_futex_wake_mark+0x10/0x10 [ 364.395892][T25210] ? __rcu_read_unlock+0x4f/0x70 [ 364.395916][T25210] ? avc_has_perm_noaudit+0x1b1/0x200 [ 364.395936][T25210] ? should_fail_ex+0x30/0x280 [ 364.395954][T25210] ? xskq_create+0x36/0xe0 [ 364.396036][T25210] vmalloc_user_noprof+0x7d/0xb0 [ 364.396067][T25210] ? xskq_create+0x80/0xe0 [ 364.396095][T25210] xskq_create+0x80/0xe0 [ 364.396151][T25210] xsk_init_queue+0x95/0xf0 [ 364.396172][T25210] xsk_setsockopt+0x3f5/0x640 [ 364.396271][T25210] ? __pfx_xsk_setsockopt+0x10/0x10 [ 364.396292][T25210] __sys_setsockopt+0x184/0x200 [ 364.396324][T25210] __x64_sys_setsockopt+0x64/0x80 [ 364.396406][T25210] x64_sys_call+0x20ec/0x3000 [ 364.396429][T25210] do_syscall_64+0xd2/0x200 [ 364.396483][T25210] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 364.396511][T25210] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 364.396686][T25210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.396707][T25210] RIP: 0033:0x7ff6561cf6c9 [ 364.396767][T25210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.396784][T25210] RSP: 002b:00007ff654c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.396802][T25210] RAX: ffffffffffffffda RBX: 00007ff656425fa0 RCX: 00007ff6561cf6c9 [ 364.396814][T25210] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 364.396825][T25210] RBP: 00007ff656251f91 R08: 0000000000000004 R09: 0000000000000000 [ 364.396837][T25210] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.396848][T25210] R13: 00007ff656426038 R14: 00007ff656425fa0 R15: 00007ffc19f0b818 [ 364.396877][T25210] [ 364.620478][T25210] Mem-Info: [ 364.623667][T25210] active_anon:50533 inactive_anon:19 isolated_anon:0 [ 364.623667][T25210] active_file:9089 inactive_file:20959 isolated_file:0 [ 364.623667][T25210] unevictable:0 dirty:282 writeback:0 [ 364.623667][T25210] slab_reclaimable:3864 slab_unreclaimable:48091 [ 364.623667][T25210] mapped:29332 shmem:46474 pagetables:1502 [ 364.623667][T25210] sec_pagetables:0 bounce:0 [ 364.623667][T25210] kernel_misc_reclaimable:0 [ 364.623667][T25210] free:1763861 free_pcp:36560 free_cma:0 [ 364.669740][T25210] Node 0 active_anon:202132kB inactive_anon:76kB active_file:36356kB inactive_file:83836kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117328kB dirty:1128kB writeback:0kB shmem:185896kB kernel_stack:4672kB pagetables:6008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.697888][T25210] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.727643][T25210] lowmem_reserve[]: 0 2881 7859 7859 [ 364.733157][T25210] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 364.764625][T25210] lowmem_reserve[]: 0 0 4978 4978 [ 364.770446][T25210] Node 0 Normal free:4101360kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:202180kB inactive_anon:76kB active_file:36356kB inactive_file:83864kB unevictable:0kB writepending:564kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:134744kB local_pcp:19768kB free_cma:0kB [ 364.803872][T25210] lowmem_reserve[]: 0 0 0 0 [ 364.808433][T25210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 364.821302][T25210] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 364.837674][T25210] Node 0 Normal: 2575*4kB (UME) 1194*8kB (UME) 638*16kB (UME) 550*32kB (UME) 22*64kB (UME) 3*128kB (E) 76*256kB (UE) 162*512kB (UME) 147*1024kB (UM) 83*2048kB (UME) 886*4096kB (UM) = 4101420kB [ 364.856890][T25210] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 364.866203][T25210] 76559 total pagecache pages [ 364.870903][T25210] 41 pages in swap cache [ 364.875166][T25210] Free swap = 116688kB [ 364.879344][T25210] Total swap = 124996kB [ 364.883497][T25210] 2097051 pages RAM [ 364.887335][T25210] 0 pages HighMem/MovableOnly [ 364.892025][T25210] 81087 pages reserved [ 365.129501][T23932] rock: directory entry would overflow storage [ 365.135779][T23932] rock: sig=0x4f50, size=4, remaining=3 [ 365.141629][T23932] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 365.161461][T23932] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 365.288838][T25261] netlink: 'syz.3.7835': attribute type 3 has an invalid length. [ 365.296729][T25261] netlink: 'syz.3.7835': attribute type 1 has an invalid length. [ 365.304595][T25261] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7835'. [ 365.362706][T25256] loop8: detected capacity change from 0 to 8192 [ 365.554169][T25296] loop8: detected capacity change from 0 to 128 [ 365.562813][T25296] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 365.574541][T25296] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 365.582457][T25296] FAT-fs (loop8): Filesystem has been set read-only [ 365.590264][T25296] syz.8.7852: attempt to access beyond end of device [ 365.590264][T25296] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 365.604361][T25296] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 365.612259][T25296] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 365.624497][T25296] syz.8.7852: attempt to access beyond end of device [ 365.624497][T25296] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 365.639007][T25296] syz.8.7852: attempt to access beyond end of device [ 365.639007][T25296] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 366.131970][T25329] netlink: 'syz.5.7866': attribute type 83 has an invalid length. [ 366.340406][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 366.340424][ T29] audit: type=1326 audit(366.323:17953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.395912][ T29] audit: type=1326 audit(366.323:17954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.418944][ T29] audit: type=1326 audit(366.353:17955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.442100][ T29] audit: type=1326 audit(366.353:17956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.465188][ T29] audit: type=1326 audit(366.353:17957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.488189][ T29] audit: type=1326 audit(366.353:17958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.511190][ T29] audit: type=1400 audit(366.353:17959): avc: denied { mount } for pid=25343 comm="syz.1.7873" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 366.533428][ T29] audit: type=1326 audit(366.353:17960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.556505][ T29] audit: type=1326 audit(366.353:17961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.579531][ T29] audit: type=1326 audit(366.363:17962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 366.722513][T25367] loop9: detected capacity change from 0 to 136 [ 366.748126][T25367] rock: directory entry would overflow storage [ 366.754339][T25367] rock: sig=0x4f50, size=4, remaining=3 [ 366.759965][T25367] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 366.847292][T25377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7888'. [ 367.102742][T25411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25411 comm=syz.1.7904 [ 367.160528][T18879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.209550][T18879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.259644][T18879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.312588][T18879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.373238][T18879] batadv1: left allmulticast mode [ 367.378518][T18879] batadv1: left promiscuous mode [ 367.383651][T18879] bridge0: port 3(batadv1) entered disabled state [ 367.395762][T18879] bridge_slave_1: left allmulticast mode [ 367.401465][T18879] bridge_slave_1: left promiscuous mode [ 367.407375][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.415238][T18879] bridge_slave_0: left allmulticast mode [ 367.421038][T18879] bridge_slave_0: left promiscuous mode [ 367.427021][T18879] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.452038][T25445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25445 comm=syz.3.7919 [ 367.548726][T18879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.558307][T23932] rock: directory entry would overflow storage [ 367.558418][T18879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.564521][T23932] rock: sig=0x4f50, size=4, remaining=3 [ 367.564539][T23932] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 367.587695][T23932] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 367.596560][T18879] bond0 (unregistering): Released all slaves [ 367.624963][T25454] syz_tun: entered allmulticast mode [ 367.631115][T25454] syz_tun: left allmulticast mode [ 367.798596][T18879] hsr_slave_0: left promiscuous mode [ 367.804266][T18879] hsr_slave_1: left promiscuous mode [ 367.810025][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.817583][T18879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.826233][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.833638][T18879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.844708][T18879] veth1_macvtap: left promiscuous mode [ 367.850568][T18879] veth0_macvtap: left promiscuous mode [ 367.856588][T18879] veth1_vlan: left promiscuous mode [ 367.861953][T18879] veth0_vlan: left promiscuous mode [ 367.927337][T18879] team0 (unregistering): Port device team_slave_1 removed [ 367.938961][T18879] team0 (unregistering): Port device team_slave_0 removed [ 367.973596][T25426] lo speed is unknown, defaulting to 1000 [ 368.203346][T25426] chnl_net:caif_netlink_parms(): no params data found [ 368.321511][T25426] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.328731][T25426] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.336084][T25426] bridge_slave_0: entered allmulticast mode [ 368.342775][T25426] bridge_slave_0: entered promiscuous mode [ 368.357004][T25426] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.364136][T25426] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.405909][T25426] bridge_slave_1: entered allmulticast mode [ 368.427400][T25426] bridge_slave_1: entered promiscuous mode [ 368.456991][T25507] pimreg: entered allmulticast mode [ 368.463068][T18879] IPVS: stop unused estimator thread 0... [ 368.475762][T25509] pimreg: left allmulticast mode [ 368.531183][T25426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.566101][T25426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.607260][T25426] team0: Port device team_slave_0 added [ 368.627059][T25426] team0: Port device team_slave_1 added [ 368.678259][T25426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.685431][T25426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.711837][T25426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.732418][T25426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.739547][T25426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.765676][T25426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.813046][T25426] hsr_slave_0: entered promiscuous mode [ 368.820594][T25426] hsr_slave_1: entered promiscuous mode [ 368.918140][T25536] veth0: entered promiscuous mode [ 368.962313][T25536] bridge0: entered promiscuous mode [ 368.977529][T25536] bridge0: port 3(macsec1) entered blocking state [ 368.978753][T25541] loop9: detected capacity change from 0 to 1024 [ 368.984140][T25536] bridge0: port 3(macsec1) entered disabled state [ 368.994970][T25536] macsec1: entered allmulticast mode [ 369.002566][T25536] bridge0: entered allmulticast mode [ 369.008435][T25541] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 369.019398][T25541] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 369.030004][T25541] JBD2: no valid journal superblock found [ 369.030001][T25536] macsec1: left allmulticast mode [ 369.030032][T25536] bridge0: left allmulticast mode [ 369.035814][T25541] EXT4-fs (loop9): Could not load journal inode [ 369.062731][T25541] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 369.092633][T25536] bridge0: left promiscuous mode [ 369.172123][T25535] veth0: left promiscuous mode [ 369.190733][T25554] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7967'. [ 369.300953][T25572] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.310843][T25572] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.322012][T25574] loop9: detected capacity change from 0 to 128 [ 369.331479][T25574] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.358185][T25572] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.368059][T25572] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.380067][T23932] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.421029][T25426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.445887][T25426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.464848][T25572] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.474733][T25572] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.487333][T25426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.504623][T25426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.525974][T25572] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.535858][T25572] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.580254][T25426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.592898][T25426] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.604401][T18922] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.612885][T18922] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.622161][T18929] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.629291][T18929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.643958][T18929] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.652246][T18929] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.670764][T18922] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.677891][T18922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.713839][T18929] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.722180][T18929] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.734497][T18921] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.744425][T18921] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.755696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.770658][T18929] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.778973][T18929] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.817570][T18921] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.827481][T18921] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.888246][T18921] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.898286][T18921] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.916802][T25426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.947729][T18921] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.957744][T18921] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.003288][T25595] lo speed is unknown, defaulting to 1000 [ 370.039675][T18921] bridge_slave_1: left allmulticast mode [ 370.045427][T18921] bridge_slave_1: left promiscuous mode [ 370.051212][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.059678][T18921] bridge_slave_0: left allmulticast mode [ 370.065491][T18921] bridge_slave_0: left promiscuous mode [ 370.071258][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.159156][T18921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.170460][T18921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.180576][T18921] bond0 (unregistering): Released all slaves [ 370.218673][T18921] tipc: Left network mode [ 370.245060][T25426] veth0_vlan: entered promiscuous mode [ 370.272501][T25426] veth1_vlan: entered promiscuous mode [ 370.301100][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7992'. [ 370.327687][T18921] hsr_slave_0: left promiscuous mode [ 370.333690][T18921] hsr_slave_1: left promiscuous mode [ 370.339687][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.347270][T18921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.355656][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.363158][T18921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.379759][T18921] veth1_macvtap: left promiscuous mode [ 370.385283][T18921] veth0_macvtap: left promiscuous mode [ 370.391084][T18921] veth1_vlan: left promiscuous mode [ 370.396425][T18921] veth0_vlan: left promiscuous mode [ 370.441516][T25651] tipc: Failed to remove unknown binding: 66,1,1/0:667563112/667563114 [ 370.450002][T25651] tipc: Failed to remove unknown binding: 66,1,1/0:667563112/667563114 [ 370.499257][T18921] team0 (unregistering): Port device team_slave_1 removed [ 370.511916][T18921] team0 (unregistering): Port device team_slave_0 removed [ 370.531137][T25659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7999'. [ 370.556182][T25595] chnl_net:caif_netlink_parms(): no params data found [ 370.574866][T25426] veth0_macvtap: entered promiscuous mode [ 370.600422][T25426] veth1_macvtap: entered promiscuous mode [ 370.635276][T25595] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.642408][T25595] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.653533][T25595] bridge_slave_0: entered allmulticast mode [ 370.660564][T25595] bridge_slave_0: entered promiscuous mode [ 370.670639][T25426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.680432][T25595] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.687837][T25595] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.695859][T25595] bridge_slave_1: entered allmulticast mode [ 370.702507][T25595] bridge_slave_1: entered promiscuous mode [ 370.711448][T25426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.722742][T18922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.737438][T18922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.746507][T18922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.760955][T18922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.773052][T25595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.788120][T25595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.821167][T25595] team0: Port device team_slave_0 added [ 370.821418][T25674] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8004'. [ 370.830731][T25595] team0: Port device team_slave_1 added [ 370.876610][T25595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.883627][T25595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.909750][T25595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.924660][T18921] IPVS: stop unused estimator thread 0... [ 370.926580][T25595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.937574][T25595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.963746][T25595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.016544][T25595] hsr_slave_0: entered promiscuous mode [ 371.027820][T25595] hsr_slave_1: entered promiscuous mode [ 371.034368][T25595] debugfs: 'hsr0' already exists in 'hsr' [ 371.040222][T25595] Cannot create hsr debugfs directory [ 371.041470][T25687] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.8009'. [ 371.056069][T25687] netlink: zone id is out of range [ 371.061244][T25687] netlink: zone id is out of range [ 371.066919][T25687] netlink: zone id is out of range [ 371.072240][T25687] netlink: zone id is out of range [ 371.077699][T25687] netlink: del zone limit has 8 unknown bytes [ 371.218485][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8013'. [ 371.306880][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8018'. [ 371.347759][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 371.347779][ T29] audit: type=1400 audit(371.333:18059): avc: denied { accept } for pid=25713 comm="syz.4.8021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.395433][T25595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.404882][T25595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.414991][T25595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.424568][T25595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.486147][T25595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.500030][T25595] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.511912][T18929] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.519039][T18929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.547513][T18922] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.554684][T18922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.573214][T25595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.583803][T25595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.626886][ T29] audit: type=1400 audit(371.613:18060): avc: denied { create } for pid=25741 comm="syz.3.8032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 371.651199][ T29] audit: type=1400 audit(371.613:18061): avc: denied { ioctl } for pid=25741 comm="syz.3.8032" path="socket:[80175]" dev="sockfs" ino=80175 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 371.721208][T25595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.753147][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8035'. [ 371.762946][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8035'. [ 371.842140][T25595] veth0_vlan: entered promiscuous mode [ 371.853996][T25595] veth1_vlan: entered promiscuous mode [ 371.882210][T25595] veth0_macvtap: entered promiscuous mode [ 371.890654][T25595] veth1_macvtap: entered promiscuous mode [ 371.903098][T25595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.913425][T25595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.935350][T18879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.949135][T18879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.966375][ T29] audit: type=1326 audit(371.943:18062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 371.979766][T18879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.989614][ T29] audit: type=1326 audit(371.943:18063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 372.000681][T18879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.027365][ T29] audit: type=1326 audit(371.953:18064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 372.052986][ T29] audit: type=1326 audit(371.953:18065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 372.076012][ T29] audit: type=1326 audit(371.953:18066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 372.131317][ T29] audit: type=1326 audit(372.013:18067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 372.133994][T25785] geneve2: entered promiscuous mode [ 372.154559][ T29] audit: type=1326 audit(372.013:18068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.1.8044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6561cf6c9 code=0x7ffc0000 [ 372.182971][T25785] geneve2: entered allmulticast mode [ 372.231516][T18922] Bluetooth: hci0: Frame reassembly failed (-84) [ 372.249667][T25796] bridge: RTM_NEWNEIGH with invalid ether address [ 372.278129][T25800] __nla_validate_parse: 1 callbacks suppressed [ 372.278159][T25800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8052'. [ 372.319888][T25804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25804 comm=syz.1.8055 [ 372.332613][T25804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25804 comm=syz.1.8055 [ 372.677059][T25852] loop2: detected capacity change from 0 to 136 [ 372.687168][T25852] rock: directory entry would overflow storage [ 372.693408][T25852] rock: sig=0x4f50, size=4, remaining=3 [ 372.699038][T25852] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 373.525847][T25595] rock: directory entry would overflow storage [ 373.532060][T25595] rock: sig=0x4f50, size=4, remaining=3 [ 373.538119][T25595] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 373.548705][T25595] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 373.934753][T25888] loop9: detected capacity change from 0 to 32768 [ 373.952789][T25909] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8099'. [ 373.976346][T25888] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 373.981647][T25888] loop9: p1 start 460800 is beyond EOD, truncated [ 373.988237][T25888] loop9: p2 size 83886080 extends beyond EOD, truncated [ 373.998541][T25888] loop9: p5 start 460800 is beyond EOD, truncated [ 374.005186][T25888] loop9: p6 size 83886080 extends beyond EOD, truncated [ 374.305659][ T4806] Bluetooth: hci0: command 0x1003 tx timeout [ 374.305673][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 374.411290][T25939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8112'. [ 374.460386][T25943] warn_alloc: 9 callbacks suppressed [ 374.460406][T25943] syz.1.8114: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 374.480512][T25943] CPU: 0 UID: 0 PID: 25943 Comm: syz.1.8114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 374.480541][T25943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.480557][T25943] Call Trace: [ 374.480564][T25943] [ 374.480576][T25943] __dump_stack+0x1d/0x30 [ 374.480613][T25943] dump_stack_lvl+0xe8/0x140 [ 374.480643][T25943] dump_stack+0x15/0x1b [ 374.480662][T25943] warn_alloc+0x12b/0x1a0 [ 374.480700][T25943] ? __rcu_read_unlock+0x4f/0x70 [ 374.480775][T25943] __vmalloc_node_range_noprof+0x9d/0xed0 [ 374.480827][T25943] ? __futex_wait+0x1fa/0x260 [ 374.480856][T25943] ? __pfx_futex_wake_mark+0x10/0x10 [ 374.480897][T25943] ? __rcu_read_unlock+0x4f/0x70 [ 374.480924][T25943] ? avc_has_perm_noaudit+0x1b1/0x200 [ 374.480953][T25943] ? should_fail_ex+0x30/0x280 [ 374.480977][T25943] ? xskq_create+0x36/0xe0 [ 374.481012][T25943] vmalloc_user_noprof+0x7d/0xb0 [ 374.481095][T25943] ? xskq_create+0x80/0xe0 [ 374.481127][T25943] xskq_create+0x80/0xe0 [ 374.481225][T25943] xsk_init_queue+0x95/0xf0 [ 374.481255][T25943] xsk_setsockopt+0x3f5/0x640 [ 374.481281][T25943] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.481310][T25943] __sys_setsockopt+0x184/0x200 [ 374.481352][T25943] __x64_sys_setsockopt+0x64/0x80 [ 374.481502][T25943] x64_sys_call+0x20ec/0x3000 [ 374.481526][T25943] do_syscall_64+0xd2/0x200 [ 374.481546][T25943] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 374.481583][T25943] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 374.481643][T25943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.481666][T25943] RIP: 0033:0x7ff6561cf6c9 [ 374.481694][T25943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.481716][T25943] RSP: 002b:00007ff654c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.481737][T25943] RAX: ffffffffffffffda RBX: 00007ff656425fa0 RCX: 00007ff6561cf6c9 [ 374.481753][T25943] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 374.481769][T25943] RBP: 00007ff656251f91 R08: 0000000000000004 R09: 0000000000000000 [ 374.481835][T25943] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.481854][T25943] R13: 00007ff656426038 R14: 00007ff656425fa0 R15: 00007ffc19f0b818 [ 374.481881][T25943] [ 374.481890][T25943] Mem-Info: [ 374.708488][T25949] loop2: detected capacity change from 0 to 512 [ 374.711156][T25943] active_anon:50296 inactive_anon:22 isolated_anon:0 [ 374.711156][T25943] active_file:9089 inactive_file:20967 isolated_file:0 [ 374.711156][T25943] unevictable:0 dirty:125 writeback:0 [ 374.711156][T25943] slab_reclaimable:3865 slab_unreclaimable:48811 [ 374.711156][T25943] mapped:29103 shmem:46384 pagetables:1470 [ 374.711156][T25943] sec_pagetables:0 bounce:0 [ 374.711156][T25943] kernel_misc_reclaimable:0 [ 374.711156][T25943] free:1774472 free_pcp:25833 free_cma:0 [ 374.762716][T25943] Node 0 active_anon:201248kB inactive_anon:88kB active_file:36356kB inactive_file:83868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116412kB dirty:540kB writeback:0kB shmem:185576kB kernel_stack:4576kB pagetables:6036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.790726][T25943] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.820468][T25943] lowmem_reserve[]: 0 2881 7859 7859 [ 374.825937][T25943] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 374.857358][T25943] lowmem_reserve[]: 0 0 4978 4978 [ 374.862701][T25943] Node 0 Normal free:4135800kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:201364kB inactive_anon:88kB active_file:36356kB inactive_file:83868kB unevictable:0kB writepending:540kB zspages:0kB present:5242880kB managed:5098240kB mlocked:12kB bounce:0kB free_pcp:99344kB local_pcp:85504kB free_cma:0kB [ 374.896290][T25943] lowmem_reserve[]: 0 0 0 0 [ 374.900940][T25943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.913945][T25943] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 374.930284][T25943] Node 0 Normal: 2386*4kB (UME) 1688*8kB (UME) 641*16kB (UME) 133*32kB (UME) 399*64kB (UME) 128*128kB (UME) 103*256kB (UME) 169*512kB (UME) 147*1024kB (UM) 82*2048kB (UME) 885*4096kB (UM) = 4135800kB [ 374.950293][T25943] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 374.959669][T25943] 76472 total pagecache pages [ 374.964669][T25943] 44 pages in swap cache [ 374.968975][T25943] Free swap = 116684kB [ 374.973339][T25943] Total swap = 124996kB [ 374.977527][T25943] 2097051 pages RAM [ 374.981350][T25943] 0 pages HighMem/MovableOnly [ 374.986084][T25943] 81087 pages reserved [ 375.014171][T25949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.137032][T25977] atomic_op ffff88813b945128 conn xmit_atomic 0000000000000000 [ 375.184398][T25981] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8129'. [ 375.197051][T25595] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.293580][T25995] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8135'. [ 375.462082][T26017] loop9: detected capacity change from 0 to 8192 [ 375.531302][T26031] SELinux: failed to load policy [ 375.600101][T26041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8158'. [ 375.643554][T26047] loop4: detected capacity change from 0 to 1024 [ 375.657328][T26047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.677652][T26047] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 375.699182][T26047] System zones: 0-1, 3-36 [ 375.704401][T26047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.723774][T26061] pimreg: entered allmulticast mode [ 375.740768][T26061] pimreg: left allmulticast mode [ 375.888358][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8177'. [ 375.952046][T26087] loop9: detected capacity change from 0 to 8192 [ 376.073901][T26102] loop2: detected capacity change from 0 to 512 [ 376.083245][T26102] journal_path: Non-blockdev passed as './bus' [ 376.089492][T26102] EXT4-fs: error: could not find journal device path [ 376.233454][T26128] wg2: entered promiscuous mode [ 376.238545][T26128] wg2: entered allmulticast mode [ 376.258363][T25426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.610474][T26152] lo speed is unknown, defaulting to 1000 [ 376.655248][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 376.655265][ T29] audit: type=1400 audit(376.633:18853): avc: denied { read } for pid=26163 comm="syz.1.8214" path="socket:[82422]" dev="sockfs" ino=82422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 377.037452][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8220'. [ 377.095489][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8221'. [ 377.104725][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8221'. [ 377.115832][T26187] loop9: detected capacity change from 0 to 1024 [ 377.125415][T26187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.189841][ T29] audit: type=1400 audit(377.173:18854): avc: denied { mount } for pid=26193 comm="syz.4.8225" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 377.214552][ T29] audit: type=1400 audit(377.173:18855): avc: denied { mounton } for pid=26193 comm="syz.4.8225" path="/33/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 377.258689][ T29] audit: type=1400 audit(377.203:18856): avc: denied { unmount } for pid=25426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 377.416566][ T29] audit: type=1326 audit(377.393:18857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.2.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 377.439984][ T29] audit: type=1326 audit(377.393:18858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.2.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 377.470119][ T29] audit: type=1326 audit(377.403:18859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.2.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 377.493414][ T29] audit: type=1326 audit(377.403:18860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.2.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 377.516662][ T29] audit: type=1326 audit(377.403:18861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.2.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 377.539922][ T29] audit: type=1326 audit(377.433:18862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.2.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 377.584733][T26206] netlink: 'syz.2.8230': attribute type 1 has an invalid length. [ 377.669383][T23932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.764653][T26236] netlink: 64 bytes leftover after parsing attributes in process `syz.9.8244'. [ 377.781049][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8245'. [ 377.837171][T26234] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 378.063850][T26274] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8262'. [ 378.219773][T26286] loop4: detected capacity change from 0 to 8192 [ 378.274240][T26300] sd 0:0:1:0: device reset [ 378.279447][T26302] atomic_op ffff888126b61928 conn xmit_atomic 0000000000000000 [ 378.279474][T26286] loop4: p2 p3 p4 [ 378.279546][T26286] loop4: p2 start 164919041 is beyond EOD, truncated [ 378.297541][T26286] loop4: p3 size 66846464 extends beyond EOD, truncated [ 378.317069][T26286] loop4: p4 size 37048832 extends beyond EOD, truncated [ 378.503029][T26323] syz_tun: entered allmulticast mode [ 378.524886][T26322] syz_tun: left allmulticast mode [ 378.590319][T26330] loop2: detected capacity change from 0 to 7 [ 378.657741][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8289'. [ 378.669422][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8289'. [ 378.830230][T26366] wg2: entered promiscuous mode [ 378.835166][T26366] wg2: entered allmulticast mode [ 378.963176][T26384] loop2: detected capacity change from 0 to 136 [ 378.984696][T26384] rock: directory entry would overflow storage [ 378.991150][T26384] rock: sig=0x4f50, size=4, remaining=3 [ 378.996841][T26384] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 379.320899][T26427] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 379.473465][T26448] loop4: detected capacity change from 0 to 164 [ 379.551659][T26452] can0: slcan on ttyS3. [ 379.606867][T26452] can0 (unregistered): slcan off ttyS3. [ 379.728580][T26477] bridge0: port 3(batadv1) entered blocking state [ 379.735179][T26477] bridge0: port 3(batadv1) entered disabled state [ 379.742205][T26477] batadv1: entered allmulticast mode [ 379.749099][T26477] batadv1: entered promiscuous mode [ 379.801168][T25595] rock: directory entry would overflow storage [ 379.807513][T25595] rock: sig=0x4f50, size=4, remaining=3 [ 379.813077][T25595] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 379.829886][T25595] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 379.880483][T26479] netlink: 'syz.9.8357': attribute type 3 has an invalid length. [ 379.973812][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8364'. [ 379.988869][T26498] SELinux: policydb table sizes (133,1) do not match mine (8,7) [ 379.998071][T26498] SELinux: failed to load policy [ 380.197270][T26531] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8379'. [ 380.230998][T18879] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 380.240360][T18879] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 380.290063][T26541] netlink: 'syz.9.8382': attribute type 3 has an invalid length. [ 380.462700][T26562] batadv_slave_1: entered promiscuous mode [ 380.470302][T26562] batadv_slave_1: left promiscuous mode [ 380.558199][T26567] netlink: 'syz.4.8395': attribute type 5 has an invalid length. [ 380.598014][T26572] serio: Serial port ptm0 [ 380.906655][T26589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8404'. [ 381.268789][T26613] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8415'. [ 381.278011][T26613] bond_slave_0: entered promiscuous mode [ 381.283732][T26613] bond_slave_1: entered promiscuous mode [ 381.430970][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8416'. [ 381.433865][T26598] Set syz1 is full, maxelem 65536 reached [ 381.922636][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 381.922651][ T29] audit: type=1326 audit(381.903:19060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 381.956442][ T29] audit: type=1326 audit(381.933:19061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 381.979505][ T29] audit: type=1326 audit(381.933:19062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.002735][ T29] audit: type=1326 audit(381.933:19063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.025847][ T29] audit: type=1326 audit(381.933:19064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.048841][ T29] audit: type=1326 audit(381.933:19065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.072083][ T29] audit: type=1326 audit(381.933:19066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.095169][ T29] audit: type=1326 audit(381.933:19067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.118210][ T29] audit: type=1326 audit(381.933:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.141485][ T29] audit: type=1326 audit(381.933:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26668 comm="syz.2.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc14d8f6c9 code=0x7ffc0000 [ 382.336505][T26701] loop4: detected capacity change from 0 to 256 [ 382.379481][T26711] loop2: detected capacity change from 0 to 764 [ 382.389572][T26711] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 382.426530][T26711] Symlink component flag not implemented [ 382.439334][T26711] Symlink component flag not implemented (7) [ 382.494909][T26727] syzkaller0: entered promiscuous mode [ 382.515545][T26727] syzkaller0 (unregistering): left promiscuous mode [ 382.893755][T26758] loop2: detected capacity change from 0 to 512 [ 382.920769][T26758] EXT4-fs (loop2): orphan cleanup on readonly fs [ 382.942353][T26758] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.8482: bad orphan inode 13 [ 382.967017][T26758] ext4_test_bit(bit=12, block=18) = 1 [ 382.972471][T26758] is_bad_inode(inode)=0 [ 382.976665][T26758] NEXT_ORPHAN(inode)=2130706432 [ 382.981542][T26758] max_ino=32 [ 382.984783][T26758] i_nlink=1 [ 383.027851][T26758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.071650][T26758] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 383.101605][T26758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8482: bg 0: block 248: padding at end of block bitmap is not set [ 383.130040][T26758] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.8482: Failed to acquire dquot type 1 [ 383.141995][T26758] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 383.188888][T25595] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 383.201280][T25595] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 383.277727][T26775] loop9: detected capacity change from 0 to 1024 [ 383.286345][T26775] EXT4-fs: Ignoring removed nobh option [ 383.292016][T26775] EXT4-fs: Ignoring removed bh option [ 383.307445][T26775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.338112][T26782] __nla_validate_parse: 3 callbacks suppressed [ 383.338132][T26782] netlink: 444 bytes leftover after parsing attributes in process `syz.4.8492'. [ 383.355581][T26775] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 383.370607][T26775] EXT4-fs (loop9): Remounting filesystem read-only [ 383.377896][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8492'. [ 383.416363][T18929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.434554][T23932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.479550][T26789] netlink: 168 bytes leftover after parsing attributes in process `syz.9.8495'. [ 383.493942][T26790] loop4: detected capacity change from 0 to 136 [ 383.502760][T18929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.514295][T26790] rock: directory entry would overflow storage [ 383.520568][T26790] rock: sig=0x4f50, size=4, remaining=3 [ 383.526309][T26790] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 383.559518][T18929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.590191][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8499'. [ 383.608790][T18929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.656899][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8499'. [ 383.677966][T26791] lo speed is unknown, defaulting to 1000 [ 383.721331][T18929] bridge_slave_1: left allmulticast mode [ 383.727135][T18929] bridge_slave_1: left promiscuous mode [ 383.732820][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.743302][T18929] bridge_slave_0: left allmulticast mode [ 383.749107][T18929] bridge_slave_0: left promiscuous mode [ 383.754845][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.788356][T26814] SELinux: failed to load policy [ 383.858541][T18929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.877713][T18929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.892386][T18929] bond0 (unregistering): Released all slaves [ 383.931630][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8510'. [ 383.989186][T26791] chnl_net:caif_netlink_parms(): no params data found [ 384.049709][T18929] hsr_slave_0: left promiscuous mode [ 384.055558][T18929] hsr_slave_1: left promiscuous mode [ 384.064765][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.072282][T18929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.079936][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.087421][T18929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.098675][T18929] veth1_macvtap: left promiscuous mode [ 384.104495][T18929] veth0_macvtap: left promiscuous mode [ 384.110473][T18929] veth1_vlan: left promiscuous mode [ 384.115918][T18929] veth0_vlan: left promiscuous mode [ 384.139485][T26842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26842 comm=syz.9.8514 [ 384.199187][T18929] team0 (unregistering): Port device team_slave_1 removed [ 384.215109][T18929] team0 (unregistering): Port device team_slave_0 removed [ 384.276985][T26791] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.284165][T26791] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.291760][T26791] bridge_slave_0: entered allmulticast mode [ 384.298359][T26791] bridge_slave_0: entered promiscuous mode [ 384.305290][T26791] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.312494][T26791] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.320130][T26791] bridge_slave_1: entered allmulticast mode [ 384.326957][T26791] bridge_slave_1: entered promiscuous mode [ 384.334438][T25426] rock: directory entry would overflow storage [ 384.340693][T25426] rock: sig=0x4f50, size=4, remaining=3 [ 384.346408][T25426] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 384.355419][T25426] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 384.365396][T26791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.377264][T26791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.404141][T26791] team0: Port device team_slave_0 added [ 384.411012][T26791] team0: Port device team_slave_1 added [ 384.418947][T26853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8520'. [ 384.435529][T26791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.442628][T26791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.469296][T26791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.481580][T26791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.488658][T26791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.514946][T26791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.547337][T26791] hsr_slave_0: entered promiscuous mode [ 384.553555][T26791] hsr_slave_1: entered promiscuous mode [ 384.559656][T26791] debugfs: 'hsr0' already exists in 'hsr' [ 384.565420][T26791] Cannot create hsr debugfs directory [ 384.872038][T26863] Set syz1 is full, maxelem 65536 reached [ 384.894611][T26791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.907553][T26791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.918533][T26791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.929356][T26791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.950114][T26791] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.957255][T26791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.964715][T26791] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.971830][T26791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.983173][T26882] tipc: Started in network mode [ 384.988153][T26882] tipc: Node identity ac14140f, cluster identity 4711 [ 384.995872][T26882] tipc: New replicast peer: 255.255.255.255 [ 385.002023][T26882] tipc: Enabled bearer , priority 10 [ 385.028917][T26791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.039736][T18879] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.048955][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.064750][T26791] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.105102][T18929] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.112243][T18929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.131937][T18879] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.139118][T18879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.232178][T26902] loop9: detected capacity change from 0 to 1024 [ 385.237661][T26791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.259710][T26902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 385.288052][T26902] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm wg1: lblock 0 mapped to illegal pblock 0 (length 1) [ 385.303227][T26902] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 385.315719][T26902] EXT4-fs (loop9): This should not happen!! Data will be lost [ 385.315719][T26902] [ 385.342760][T23932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 385.390480][T26791] veth0_vlan: entered promiscuous mode [ 385.401923][T26791] veth1_vlan: entered promiscuous mode [ 385.419861][T26791] veth0_macvtap: entered promiscuous mode [ 385.429379][T26791] veth1_macvtap: entered promiscuous mode [ 385.448167][T26791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.469156][T26791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.488905][T18929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.503521][T18929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.521215][T18929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.540619][T18922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.606609][T26944] warn_alloc: 31 callbacks suppressed [ 385.606627][T26944] syz.3.8550: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 385.626937][T26944] CPU: 1 UID: 0 PID: 26944 Comm: syz.3.8550 Not tainted syzkaller #0 PREEMPT(voluntary) [ 385.626976][T26944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.627052][T26944] Call Trace: [ 385.627059][T26944] [ 385.627068][T26944] __dump_stack+0x1d/0x30 [ 385.627095][T26944] dump_stack_lvl+0xe8/0x140 [ 385.627120][T26944] dump_stack+0x15/0x1b [ 385.627141][T26944] warn_alloc+0x12b/0x1a0 [ 385.627249][T26944] ? __rcu_read_unlock+0x4f/0x70 [ 385.627280][T26944] __vmalloc_node_range_noprof+0x9d/0xed0 [ 385.627318][T26944] ? __futex_wait+0x1fa/0x260 [ 385.627343][T26944] ? __pfx_futex_wake_mark+0x10/0x10 [ 385.627407][T26944] ? __rcu_read_unlock+0x4f/0x70 [ 385.627436][T26944] ? avc_has_perm_noaudit+0x1b1/0x200 [ 385.627473][T26944] ? should_fail_ex+0x30/0x280 [ 385.627495][T26944] ? xskq_create+0x36/0xe0 [ 385.627592][T26944] vmalloc_user_noprof+0x7d/0xb0 [ 385.627630][T26944] ? xskq_create+0x80/0xe0 [ 385.627697][T26944] xskq_create+0x80/0xe0 [ 385.627754][T26944] xsk_init_queue+0x95/0xf0 [ 385.627780][T26944] xsk_setsockopt+0x3f5/0x640 [ 385.627805][T26944] ? __pfx_xsk_setsockopt+0x10/0x10 [ 385.627837][T26944] __sys_setsockopt+0x184/0x200 [ 385.627931][T26944] __x64_sys_setsockopt+0x64/0x80 [ 385.628029][T26944] x64_sys_call+0x20ec/0x3000 [ 385.628062][T26944] do_syscall_64+0xd2/0x200 [ 385.628092][T26944] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 385.628254][T26944] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 385.628293][T26944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.628318][T26944] RIP: 0033:0x7f6d18bff6c9 [ 385.628337][T26944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.628359][T26944] RSP: 002b:00007f6d17667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.628382][T26944] RAX: ffffffffffffffda RBX: 00007f6d18e55fa0 RCX: 00007f6d18bff6c9 [ 385.628471][T26944] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 385.628485][T26944] RBP: 00007f6d18c81f91 R08: 0000000000000004 R09: 0000000000000000 [ 385.628499][T26944] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.628514][T26944] R13: 00007f6d18e56038 R14: 00007f6d18e55fa0 R15: 00007ffeccc5c458 [ 385.628537][T26944] [ 385.628545][T26944] Mem-Info: [ 385.856310][T26944] active_anon:50306 inactive_anon:23 isolated_anon:0 [ 385.856310][T26944] active_file:9089 inactive_file:20997 isolated_file:0 [ 385.856310][T26944] unevictable:0 dirty:227 writeback:1 [ 385.856310][T26944] slab_reclaimable:3872 slab_unreclaimable:49748 [ 385.856310][T26944] mapped:29033 shmem:46404 pagetables:1381 [ 385.856310][T26944] sec_pagetables:0 bounce:0 [ 385.856310][T26944] kernel_misc_reclaimable:0 [ 385.856310][T26944] free:1766803 free_pcp:32361 free_cma:0 [ 385.901610][T26944] Node 0 active_anon:201224kB inactive_anon:92kB active_file:36356kB inactive_file:83988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116132kB dirty:908kB writeback:4kB shmem:185616kB kernel_stack:4624kB pagetables:5524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.929213][T26944] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.958947][T26944] lowmem_reserve[]: 0 2881 7859 7859 [ 385.964263][T26944] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 385.995397][T26944] lowmem_reserve[]: 0 0 4978 4978 [ 386.000499][T26944] Node 0 Normal free:4105124kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:201224kB inactive_anon:92kB active_file:36356kB inactive_file:83988kB unevictable:0kB writepending:912kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:125916kB local_pcp:84004kB free_cma:0kB [ 386.033832][T26944] lowmem_reserve[]: 0 0 0 0 [ 386.038473][T26944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.051293][T26944] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 386.067528][T26944] Node 0 Normal: 819*4kB (M) 141*8kB (ME) 132*16kB (UME) 710*32kB (ME) 457*64kB (UM) 155*128kB (UME) 98*256kB (UME) 162*512kB (UME) 163*1024kB (UM) 86*2048kB (UME) 873*4096kB (UM) = 4105204kB [ 386.086687][T26944] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 386.096254][T26944] 76513 total pagecache pages [ 386.101040][T26944] 45 pages in swap cache [ 386.105297][T26944] Free swap = 116680kB [ 386.109496][T26944] Total swap = 124996kB [ 386.113734][T26944] 2097051 pages RAM [ 386.117562][T26944] 0 pages HighMem/MovableOnly [ 386.122250][T26944] 81087 pages reserved [ 386.126678][ T36] tipc: Node number set to 2886997007 [ 386.230345][T26962] $Hÿ: renamed from .` [ 386.237411][T26962] $Hÿ: entered promiscuous mode [ 386.242557][T26962] bond2: entered promiscuous mode [ 386.499264][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8574'. [ 386.555014][T27003] loop0: detected capacity change from 0 to 128 [ 386.565195][T27003] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 386.587947][T27003] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 386.595947][T27003] FAT-fs (loop0): Filesystem has been set read-only [ 386.603218][T27003] syz.0.8575: attempt to access beyond end of device [ 386.603218][T27003] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 386.634338][T27003] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 386.642334][T27003] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 386.650994][T27003] syz.0.8575: attempt to access beyond end of device [ 386.650994][T27003] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.668118][T27003] syz.0.8575: attempt to access beyond end of device [ 386.668118][T27003] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.695738][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8579'. [ 386.704784][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8579'. [ 386.871775][T27023] netlink: zone id is out of range [ 386.877060][T27023] netlink: zone id is out of range [ 386.883926][T27023] netlink: zone id is out of range [ 386.890500][T27023] netlink: del zone limit has 8 unknown bytes [ 386.951642][T27035] ================================================================== [ 386.959805][T27035] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 386.968778][T27035] [ 386.971108][T27035] write to 0xffff888103f10e20 of 4 bytes by task 27036 on cpu 1: [ 386.978829][T27035] selinux_inode_permission+0x3ac/0x740 [ 386.984398][T27035] security_inode_permission+0x6d/0xb0 [ 386.989873][T27035] inode_permission+0x106/0x310 [ 386.994759][T27035] link_path_walk+0x162/0x900 [ 386.999460][T27035] path_openat+0x1de/0x2170 [ 387.003972][T27035] do_filp_open+0x109/0x230 [ 387.008488][T27035] io_openat2+0x272/0x390 [ 387.012831][T27035] io_openat+0x1b/0x30 [ 387.016920][T27035] __io_issue_sqe+0xfe/0x2e0 [ 387.021534][T27035] io_issue_sqe+0x56/0xa80 [ 387.025972][T27035] io_wq_submit_work+0x3f7/0x5f0 [ 387.030935][T27035] io_worker_handle_work+0x44e/0x9b0 [ 387.036244][T27035] io_wq_worker+0x22e/0x860 [ 387.040771][T27035] ret_from_fork+0x122/0x1b0 [ 387.045375][T27035] ret_from_fork_asm+0x1a/0x30 [ 387.050151][T27035] [ 387.052482][T27035] read to 0xffff888103f10e20 of 4 bytes by task 27035 on cpu 0: [ 387.060114][T27035] selinux_inode_permission+0x334/0x740 [ 387.065677][T27035] security_inode_permission+0x6d/0xb0 [ 387.071160][T27035] inode_permission+0x106/0x310 [ 387.076029][T27035] link_path_walk+0x162/0x900 [ 387.080725][T27035] path_openat+0x1de/0x2170 [ 387.085238][T27035] do_filp_open+0x109/0x230 [ 387.089756][T27035] io_openat2+0x272/0x390 [ 387.094109][T27035] io_openat+0x1b/0x30 [ 387.098194][T27035] __io_issue_sqe+0xfe/0x2e0 [ 387.102814][T27035] io_issue_sqe+0x56/0xa80 [ 387.107254][T27035] io_submit_sqes+0x675/0x1060 [ 387.112043][T27035] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 387.117613][T27035] __x64_sys_io_uring_enter+0x78/0x90 [ 387.123029][T27035] x64_sys_call+0x2df0/0x3000 [ 387.127734][T27035] do_syscall_64+0xd2/0x200 [ 387.132267][T27035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.138169][T27035] [ 387.140504][T27035] value changed: 0x00000000 -> 0x00000001 [ 387.146224][T27035] [ 387.148549][T27035] Reported by Kernel Concurrency Sanitizer on: [ 387.154702][T27035] CPU: 0 UID: 0 PID: 27035 Comm: syz.0.8589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 387.164518][T27035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.174586][T27035] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.207021][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 387.207064][ T29] audit: type=1400 audit(387.173:19236): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[1704]" dev="pipefs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 387.601391][ T31] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.672155][ T31] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.719536][ T31] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.829446][ T31] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.892130][ T31] bridge_slave_1: left allmulticast mode [ 387.897858][ T31] bridge_slave_1: left promiscuous mode [ 387.903550][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.912051][ T31] bridge_slave_0: left allmulticast mode [ 387.917787][ T31] bridge_slave_0: left promiscuous mode [ 387.923460][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.087949][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.097888][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.107529][ T31] bond0 (unregistering): Released all slaves [ 388.228810][ T31] hsr_slave_0: left promiscuous mode [ 388.234420][ T31] hsr_slave_1: left promiscuous mode [ 388.240043][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.247447][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.254890][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.262353][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.272575][ T31] veth1_macvtap: left promiscuous mode [ 388.278161][ T31] veth0_macvtap: left promiscuous mode [ 388.283735][ T31] veth1_vlan: left promiscuous mode [ 388.289102][ T31] veth0_vlan: left promiscuous mode [ 388.350516][ T31] team0 (unregistering): Port device team_slave_1 removed [ 388.359881][ T31] team0 (unregistering): Port device team_slave_0 removed [ 388.879993][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.889912][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.936812][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.946724][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.976969][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.986928][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.046760][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.056597][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.129994][ T31] bridge_slave_1: left allmulticast mode [ 389.135746][ T31] bridge_slave_1: left promiscuous mode [ 389.141597][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.149276][ T31] bridge_slave_0: left allmulticast mode [ 389.154926][ T31] bridge_slave_0: left promiscuous mode [ 389.160710][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.170278][ T31] batadv0: left allmulticast mode [ 389.175359][ T31] batadv0: left promiscuous mode [ 389.180440][ T31] bridge0: port 1(batadv0) entered disabled state [ 389.196192][ T31] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 389.297137][ T31] bond3 (unregistering): (slave bridge2): Releasing active interface [ 389.427711][ T31] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.436430][ T31] bond_slave_0: left promiscuous mode [ 389.442440][ T31] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.451324][ T31] bond_slave_1: left promiscuous mode [ 389.457066][ T31] $Hÿ (unregistering): Released all slaves [ 389.465300][ T31] bond1 (unregistering): Released all slaves [ 389.473588][ T31] bond2 (unregistering): Released all slaves [ 389.481891][ T31] bond3 (unregistering): Released all slaves [ 389.490099][ T31] bond4 (unregistering): Released all slaves [ 389.512415][ T31] bond0 (unregistering): (slave geneve2): Releasing active interface [ 389.547326][ T31] bond1 (unregistering): (slave bridge1): Releasing active interface [ 389.627715][ T31] $Hÿ (unregistering): (slave bond2): Releasing backup interface [ 389.635956][ T31] bond2 (unregistering): left promiscuous mode [ 389.642301][ T31] $Hÿ (unregistering): Released all slaves [ 389.650799][ T31] bond1 (unregistering): Released all slaves [ 389.658947][ T31] bond2 (unregistering): Released all slaves [ 389.667361][ T31] bond0 (unregistering): Released all slaves [ 389.701127][ T31] tipc: Disabling bearer [ 389.706324][ T31] tipc: Left network mode [ 389.716042][ T31] tipc: Disabling bearer [ 389.721067][ T31] tipc: Disabling bearer [ 389.726334][ T31] tipc: Left network mode [ 389.794898][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.802571][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.810726][ T31] hsr_slave_0: left promiscuous mode [ 389.816622][ T31] hsr_slave_1: left promiscuous mode [ 389.855726][T18929] smc: removing ib device syz! [ 389.902514][T18879] smc: removing ib device syû [ 390.369855][ T31] IPVS: stop unused estimator thread 0... [ 390.376122][ T31] IPVS: stop unused estimator thread 0... [ 390.440158][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.508210][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.549146][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.618896][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.694766][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.738101][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.798785][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.868087][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.930290][ T31] bridge_slave_1: left allmulticast mode [ 390.936043][ T31] bridge_slave_1: left promiscuous mode [ 390.941757][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.949724][ T31] bridge_slave_0: left allmulticast mode [ 390.955370][ T31] bridge_slave_0: left promiscuous mode [ 390.961081][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.969640][ T31] batadv1: left allmulticast mode [ 390.974690][ T31] batadv1: left promiscuous mode [ 390.979868][ T31] bridge0: port 3(batadv1) entered disabled state [ 390.987106][ T31] bridge_slave_1: left allmulticast mode [ 390.992780][ T31] bridge_slave_1: left promiscuous mode [ 390.998586][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.006538][ T31] bridge_slave_0: left allmulticast mode [ 391.012220][ T31] bridge_slave_0: left promiscuous mode [ 391.017936][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.028077][ T31] bond_slave_0: left promiscuous mode [ 391.033506][ T31] bond_slave_1: left promiscuous mode [ 391.119261][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.129260][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.138734][ T31] bond0 (unregistering): Released all slaves [ 391.218628][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.228588][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.238050][ T31] bond0 (unregistering): Released all slaves [ 391.298005][ T31] tipc: Disabling bearer [ 391.303008][ T31] tipc: Left network mode [ 391.310728][ T31] hsr_slave_0: left promiscuous mode [ 391.316423][ T31] hsr_slave_1: left promiscuous mode [ 391.322049][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.329531][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.337185][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.344578][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.353864][ T31] hsr_slave_0: left promiscuous mode [ 391.359634][ T31] hsr_slave_1: left promiscuous mode [ 391.365247][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.372695][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.380140][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.387559][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.399759][ T31] veth1_macvtap: left promiscuous mode [ 391.405263][ T31] veth0_macvtap: left promiscuous mode [ 391.410826][ T31] veth1_vlan: left promiscuous mode [ 391.416069][ T31] veth0_vlan: left promiscuous mode [ 391.421932][ T31] veth1_macvtap: left promiscuous mode [ 391.427521][ T31] veth0_macvtap: left promiscuous mode [ 391.433017][ T31] veth1_vlan: left promiscuous mode [ 391.438392][ T31] veth0_vlan: left promiscuous mode [ 391.495710][T18929] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 391.537546][ T31] team0 (unregistering): Port device team_slave_1 removed [ 391.547014][ T31] team0 (unregistering): Port device team_slave_0 removed [ 391.602446][ T31] team0 (unregistering): Port device team_slave_1 removed [ 391.612255][ T31] team0 (unregistering): Port device team_slave_0 removed