last executing test programs: 2.420379534s ago: executing program 3 (id=273): socket$inet_tcp(0x2, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) ftruncate(r0, 0xffff) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x1000, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x12118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x60d3}], 0x18}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f0000000440)) 1.651490766s ago: executing program 4 (id=295): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) 1.538400197s ago: executing program 4 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @mcast1}}}}}}, 0x0) 1.471806328s ago: executing program 3 (id=298): r0 = io_uring_setup(0x54d6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x2, 0x3cf}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x40}, {0xa, 0x4e22, 0x0, @empty, 0x8}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "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", 0x2, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r3}}, 0x120) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.36080672s ago: executing program 4 (id=299): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000085e28de5cd00000000af0000000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xaa, 0x2, 0x8, 0x20, @loopback, @remote, 0x0, 0x87, 0xe, 0xb5}}) socket$inet6(0xa, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) waitid(0x1, 0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="801400530421"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.3233461s ago: executing program 3 (id=300): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7fffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) write(r4, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r4, &(0x7f0000000980)="a9", 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r9}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.269204271s ago: executing program 3 (id=303): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) 1.202299452s ago: executing program 3 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffd7c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x7, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0xd0, 0x268, 0x311, 0x0, 0x268, 0x1e0, 0x460, 0x460, 0x1e0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0xe4030000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x3, 0x1, 0x3, 0x2, 0x8, 0x1, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) syz_genetlink_get_family_id$nbd(0x0, r4) sendmsg$inet6(r2, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000340)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x1, &(0x7f0000000080), &(0x7f0000000240)=0x5, 0x1) 1.201460162s ago: executing program 3 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_clone(0xc0004000, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.200575382s ago: executing program 4 (id=306): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = socket$igmp6(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x800, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000202000000040000000000000700000000000000000000000b01000000000000005f"], 0x0, 0x42, 0x0, 0x1}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x8000, 0x7, 0xf, {{0x1f, 0x4, 0x2, 0x1, 0x7c, 0x64, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x20, 0x2e, 0x0, 0x4, [0x5, 0x9, 0x6, 0xe, 0x0, 0x101, 0x13]}, @generic={0x86, 0x7, "b86e711b9a"}, @rr={0x7, 0x7, 0xa0, [@remote]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0xb, [0x1, 0x2]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x7, [0x101, 0x2, 0x8]}, @ssrr={0x89, 0x17, 0xef, [@rand_addr=0x64010101, @remote, @empty, @broadcast, @local]}]}}}}}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000100)={@private=0xa010102, @remote, r5}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000340)={{0xa, 0x4e21, 0x101, @loopback, 0x4000006}, {0xa, 0xfffe, 0xeffffffd, @dev, 0x4}, 0xffffffffffffffff, {[0x9, 0x0, 0xffdffffe, 0xfffffee9, 0x0, 0x1]}}, 0x5c) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000140)=[0x0, 0x8], 0x2) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 1.182989593s ago: executing program 0 (id=307): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x100) chdir(&(0x7f00000000c0)='./bus\x00') pwrite64(r0, &(0x7f0000000140), 0x0, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwrite64(r2, &(0x7f0000000140)='+', 0x1, 0xf896) 1.134539203s ago: executing program 0 (id=309): r0 = io_uring_setup(0x54d6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x2, 0x3cf}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x40}, {0xa, 0x4e22, 0x0, @empty, 0x8}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "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", 0x2, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r3}}, 0x120) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 939.284176ms ago: executing program 0 (id=313): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r2, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc, 0x3, 0xf00) 392.672714ms ago: executing program 0 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 341.206825ms ago: executing program 2 (id=328): r0 = io_uring_setup(0x54d6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x2, 0x3cf}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x40}, {0xa, 0x4e22, 0x0, @empty, 0x8}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 340.311895ms ago: executing program 2 (id=330): timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0x25fe, 0x8, 0xc02, 0x0, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 319.643595ms ago: executing program 4 (id=332): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f600000000800000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="460cf7cebd02f7ae21025133ae3add322868010b83f0fa4fabb98566148526b5c24be51e5c72607873c8f02cecc36bd98af4476dd32cf42c62d0a714926df449ffc179647e1b2b09b33fe41ac573beee68180aa90307"], 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000540)=ANY=[], 0x1, 0x58d, &(0x7f0000000e00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 315.609615ms ago: executing program 0 (id=333): r0 = io_uring_setup(0x54d6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x2, 0x3cf}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x40}, {0xa, 0x4e22, 0x0, @empty, 0x8}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 251.758767ms ago: executing program 2 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 251.416367ms ago: executing program 0 (id=336): socket$inet_tcp(0x2, 0x1, 0x0) r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0xffff) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x1000, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x12118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x60d3}], 0x18}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f0000000440)) 250.789307ms ago: executing program 4 (id=337): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r2, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc, 0x3, 0xf00) 175.157067ms ago: executing program 2 (id=341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x7, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettaction={0x14, 0x32, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r5, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4, @ANYBLOB="cd6263c2688e51cfc916da4e51d9a3f9a5beb6ce54fad90bec70c5569297ddb88abc3bc12bc3ddc7e79a97ebbcca3d7100f00bfa937a6335206565f7ab0eb28a3ea6d95854cb7135b74df0cdf0a293bd3fb7507deac1882124fc1a091f"], 0x40}}, 0x0) 132.364998ms ago: executing program 1 (id=343): r0 = io_uring_setup(0x54d6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x2, 0x3cf}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x40}, {0xa, 0x4e22, 0x0, @empty, 0x8}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 131.658918ms ago: executing program 2 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 131.240878ms ago: executing program 1 (id=345): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) 89.761299ms ago: executing program 1 (id=346): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/129, 0x81}, {&(0x7f0000001040)=""/4060, 0xfdc}, {&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f00000004c0)=""/38, 0x26}, {&(0x7f00000001c0)=""/25, 0x19}], 0x8}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730171000000000095ffff00000000007cf46afd089ebe2896906de5d5d2dfbfbaf3a8e8615f29e8850f89508f086320ad438d4e2fd7c0ff6a7ddc7b92aac26a856ee16b9ca81b948c8aff295516283262cc634dbdaac779073558eaae3bcfbf830e2dfae7d13ef2c2f600b611bed82543ceb6c25e97060a807b69bea3c499a87ca51b0d990544294b18d491ef550fda7ba8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'geneve0\x00'}}, 0x1e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="407f8ac3eda100000000000000000000000000009e70", @ANYRES32=0x0, @ANYBLOB="00000000490a00002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xffffffff}, 0x18) 88.974989ms ago: executing program 2 (id=347): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = socket$igmp6(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x800, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000202000000040000000000000700000000000000000000000b01000000000000005f"], 0x0, 0x42, 0x0, 0x1}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x8000, 0x7, 0xf, {{0x1f, 0x4, 0x2, 0x1, 0x7c, 0x64, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x20, 0x2e, 0x0, 0x4, [0x5, 0x9, 0x6, 0xe, 0x0, 0x101, 0x13]}, @generic={0x86, 0x7, "b86e711b9a"}, @rr={0x7, 0x7, 0xa0, [@remote]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0xb, [0x1, 0x2]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x7, [0x101, 0x2, 0x8]}, @ssrr={0x89, 0x17, 0xef, [@rand_addr=0x64010101, @remote, @empty, @broadcast, @local]}]}}}}}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000100)={@private=0xa010102, @remote, r5}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000340)={{0xa, 0x4e21, 0x101, @loopback, 0x4000006}, {0xa, 0xfffe, 0xeffffffd, @dev, 0x4}, 0xffffffffffffffff, {[0x9, 0x0, 0xffdffffe, 0xfffffee9, 0x0, 0x1]}}, 0x5c) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000140)=[0x0, 0x8], 0x2) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 16.62267ms ago: executing program 1 (id=348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f600000000800000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="460cf7cebd02f7ae21025133ae3add322868010b83f0fa4fabb98566148526b5c24be51e5c72607873c8f02cecc36bd98af4476dd32cf42c62d0a714926df449ffc179647e1b2b09b33fe41ac573beee68180aa90307"], 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000540)=ANY=[], 0x1, 0x58d, &(0x7f0000000e00)="$eJzs2s1KG1EUB/CTD6OVQrMuXQx005XYPkGDKEgDBUsWLV10QLvJlMJkM7ryQfoEfZ4+iStXTdEJMelHqjg6Rn8/EA/zv5k5l4TcG7ifnn0Z7n8dff7441usvU6iHRHN04huNKMVpUZcaEQzZh0HALBs9vbSXt09cLPyvJee7eFW/0gG32tpCAAAAAAAAAAAgGu7yvn/5nndmXu98/8AsHzK8/+dBSMaFvkll+e9tDPZv81z/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoz+l4/GS84K/u/gCA6ln/AeDh+cf6P7b+A8D9dbnf/9262wQAKvTu/Yc3vX5/ey9J1iJOjotBMSj/l/nObn97Mzk3swk4KbaiNc1flnkymxeDlVif5K/+mnfixfMyP8u23vZ/y1dj/+anDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzYSKa6jenVk6IYtMr8YkA35vKy2tntb29OBszn7Xjavr15AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANc3Ojwapll2kC8ofo7/P6byYjUibv2hlRftxbN4FNU8a+NxRDciVibvavXTiWjc0J2vUuT34CNxF4rWJcbU+rUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUaHR4NEyz7CAf1d0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBXjA6PhmmWHeSVFdFcn9x7egUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH51cAAAD//zdLgII=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 15.48373ms ago: executing program 1 (id=349): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7fffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) write(r4, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r4, &(0x7f0000000980)="a9", 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r9}) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=350): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) close(r0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) sendfile(r2, r1, 0x0, 0x7ffff000) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="bb67fa4481b95e49260c15f035f603c424293f8b6cd7c1b09ec3116f085518547805a190c746be6fe6ce3ef0227f739dd2f2d2dc1004a093a089103d73748d47c7e47b0450b3999111f0b21a51", 0x4d}, {&(0x7f00000000c0)="15703e52d560320db662cf3f0aa772c949e301813015dc7dcf62666d858741a353a07f76ecb48e5f5e8bbdd1980c9c617900e4c0c9c16c20ddca", 0x3a}, {&(0x7f0000000100)="c3ba986733a6ecf79bda8124f0cdce26a5a5809cf7b1a96a7f1f2db718c9e66396c792b62bf8bc8b55371e2f47976ddc4d517e282b0dd838c07307a4f7a13e6e722613967aca99d6115b38599de1273abae473f7", 0x54}, {&(0x7f0000000300)="315ac09833976225688279346737d5330a72919262f6db96bf026ed751c13268170667cacb5332fc780483c6e8ca6a12333962505345538d314743391c7fdc2ee53603be6368708f20a1313daa46ddfce9b34112f3871b47fcb8cde229a4569a0c79d69bfb2606cc582456e258fa570572032ddd39d7d3b99da9db00e517bb4a478cdac059e4f0b68076b6e4619c021d7c7c06faa3e645907621a8229ed500bd572e3c", 0xa3}, {&(0x7f0000000400)="02cde139d683b5db1889661cb4b81ed5762f32c1f5c27f1ba9d55b4898267c4c7c5ee1c23453ea5662364a48a9cffa325c89ea359fea5ad0290cb1ebde03cc8a24ab0b6ea8b64a953dd34521f5666a8483613eb1e5bca7dfce752ab1b84b3efb53abc7be8dd2ee06daf864c815699bf6121283af58e316d20cdb9f46ee937908cbab57480df69015d4e485b29a1c342661edb71503102b0a29ccdf46ff92350a2b838956bbece4ac7c4c300724588c21cdb507eb241ed9382a7c826683e8", 0xbe}, {&(0x7f00000001c0)="2c05812ad4b49960", 0x8}], 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 26.841606][ T29] audit: type=1400 audit(1752363443.461:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.842817][ T3291] cgroup: Unknown subsys name 'net' [ 26.864491][ T29] audit: type=1400 audit(1752363443.461:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.891778][ T29] audit: type=1400 audit(1752363443.491:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.043772][ T3291] cgroup: Unknown subsys name 'cpuset' [ 27.049963][ T3291] cgroup: Unknown subsys name 'rlimit' [ 27.161421][ T29] audit: type=1400 audit(1752363443.781:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.184738][ T29] audit: type=1400 audit(1752363443.781:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.205300][ T29] audit: type=1400 audit(1752363443.781:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.224810][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.225687][ T29] audit: type=1400 audit(1752363443.791:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.254614][ T29] audit: type=1400 audit(1752363443.791:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.279440][ T29] audit: type=1400 audit(1752363443.791:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.302669][ T29] audit: type=1400 audit(1752363443.861:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.322451][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.193726][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.254246][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.285449][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 29.340155][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.347466][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.354624][ T3303] bridge_slave_0: entered allmulticast mode [ 29.361095][ T3303] bridge_slave_0: entered promiscuous mode [ 29.383816][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.391047][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.398311][ T3303] bridge_slave_1: entered allmulticast mode [ 29.404662][ T3303] bridge_slave_1: entered promiscuous mode [ 29.416927][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.424131][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.431235][ T3309] bridge_slave_0: entered allmulticast mode [ 29.437869][ T3309] bridge_slave_0: entered promiscuous mode [ 29.456037][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.469811][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.476988][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.484168][ T3309] bridge_slave_1: entered allmulticast mode [ 29.490482][ T3309] bridge_slave_1: entered promiscuous mode [ 29.499101][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.506207][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.513448][ T3310] bridge_slave_0: entered allmulticast mode [ 29.519782][ T3310] bridge_slave_0: entered promiscuous mode [ 29.529662][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.543627][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.558099][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.567250][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.574348][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.581458][ T3310] bridge_slave_1: entered allmulticast mode [ 29.587942][ T3310] bridge_slave_1: entered promiscuous mode [ 29.597507][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.617335][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.657296][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.672090][ T3303] team0: Port device team_slave_0 added [ 29.685937][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.695747][ T3309] team0: Port device team_slave_0 added [ 29.706681][ T3303] team0: Port device team_slave_1 added [ 29.719683][ T3309] team0: Port device team_slave_1 added [ 29.731202][ T3310] team0: Port device team_slave_0 added [ 29.753483][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.760595][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.767770][ T3307] bridge_slave_0: entered allmulticast mode [ 29.774232][ T3307] bridge_slave_0: entered promiscuous mode [ 29.786507][ T3310] team0: Port device team_slave_1 added [ 29.792494][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.799486][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.825414][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.836687][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.843692][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.869730][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.890713][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.897837][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.905020][ T3307] bridge_slave_1: entered allmulticast mode [ 29.911452][ T3307] bridge_slave_1: entered promiscuous mode [ 29.934707][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.941816][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.949056][ T3304] bridge_slave_0: entered allmulticast mode [ 29.956239][ T3304] bridge_slave_0: entered promiscuous mode [ 29.967325][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.974336][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.000307][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.011495][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.018494][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.044451][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.058533][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.065681][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.091668][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.102448][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.109615][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.116827][ T3304] bridge_slave_1: entered allmulticast mode [ 30.123324][ T3304] bridge_slave_1: entered promiscuous mode [ 30.141086][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.148207][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.174156][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.190977][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.201927][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.220697][ T3303] hsr_slave_0: entered promiscuous mode [ 30.226721][ T3303] hsr_slave_1: entered promiscuous mode [ 30.258792][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.273322][ T3307] team0: Port device team_slave_0 added [ 30.280293][ T3307] team0: Port device team_slave_1 added [ 30.292427][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.303614][ T3309] hsr_slave_0: entered promiscuous mode [ 30.309615][ T3309] hsr_slave_1: entered promiscuous mode [ 30.315651][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.323276][ T3309] Cannot create hsr debugfs directory [ 30.358952][ T3304] team0: Port device team_slave_0 added [ 30.366480][ T3310] hsr_slave_0: entered promiscuous mode [ 30.372440][ T3310] hsr_slave_1: entered promiscuous mode [ 30.378474][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.386073][ T3310] Cannot create hsr debugfs directory [ 30.396981][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.404006][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.430046][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.441306][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.448289][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.474266][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.485684][ T3304] team0: Port device team_slave_1 added [ 30.522110][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.529146][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.555114][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.566592][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.573679][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.599595][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.661800][ T3304] hsr_slave_0: entered promiscuous mode [ 30.668020][ T3304] hsr_slave_1: entered promiscuous mode [ 30.673889][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.681438][ T3304] Cannot create hsr debugfs directory [ 30.698051][ T3307] hsr_slave_0: entered promiscuous mode [ 30.704062][ T3307] hsr_slave_1: entered promiscuous mode [ 30.709819][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.717475][ T3307] Cannot create hsr debugfs directory [ 30.852877][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.871351][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.884342][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.893071][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.912657][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.921404][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.931622][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.945020][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.968950][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.981488][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.990935][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.002286][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.042250][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.064711][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.075288][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.084134][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.095551][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.105282][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.114094][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.123464][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.146956][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.155808][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.182023][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.202490][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.210851][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.218107][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.229529][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.236617][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.254553][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.261667][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.284782][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.291907][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.308488][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.341687][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.352159][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.368674][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.383213][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.390277][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.409774][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.423854][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.430980][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.446468][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.479083][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.500480][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.511291][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.519830][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.527018][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.551243][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.562229][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.569356][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.581408][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.588524][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.597649][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.604790][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.626181][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.636594][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.666216][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.676642][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.721952][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.751683][ T3303] veth0_vlan: entered promiscuous mode [ 31.773622][ T3303] veth1_vlan: entered promiscuous mode [ 31.818755][ T3303] veth0_macvtap: entered promiscuous mode [ 31.835286][ T3303] veth1_macvtap: entered promiscuous mode [ 31.847903][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.858403][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.869718][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.888081][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.907752][ T3309] veth0_vlan: entered promiscuous mode [ 31.919946][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928806][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.937675][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.946517][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.966795][ T3309] veth1_vlan: entered promiscuous mode [ 31.980300][ T3309] veth0_macvtap: entered promiscuous mode [ 32.002108][ T3310] veth0_vlan: entered promiscuous mode [ 32.008603][ T3309] veth1_macvtap: entered promiscuous mode [ 32.026229][ T3310] veth1_vlan: entered promiscuous mode [ 32.037438][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.045679][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.045692][ T29] audit: type=1400 audit(1752363448.671:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.yQdEJz/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.079074][ T3307] veth0_vlan: entered promiscuous mode [ 32.086621][ T29] audit: type=1400 audit(1752363448.711:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.099637][ T3304] veth0_vlan: entered promiscuous mode [ 32.108705][ T29] audit: type=1400 audit(1752363448.711:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.yQdEJz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.119233][ T3304] veth1_vlan: entered promiscuous mode [ 32.139340][ T29] audit: type=1400 audit(1752363448.711:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.149435][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.172981][ T29] audit: type=1400 audit(1752363448.711:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.yQdEJz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.200423][ T29] audit: type=1400 audit(1752363448.711:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.yQdEJz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.212918][ T3304] veth0_macvtap: entered promiscuous mode [ 32.227938][ T29] audit: type=1400 audit(1752363448.711:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.240979][ T3307] veth1_vlan: entered promiscuous mode [ 32.254058][ T29] audit: type=1400 audit(1752363448.801:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.281177][ T29] audit: type=1400 audit(1752363448.801:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=3787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.290416][ T3310] veth0_macvtap: entered promiscuous mode [ 32.310297][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.317687][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.333553][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.342244][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.351040][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.366629][ T29] audit: type=1400 audit(1752363448.991:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.368111][ T3307] veth0_macvtap: entered promiscuous mode [ 32.405956][ T3310] veth1_macvtap: entered promiscuous mode [ 32.417178][ T3304] veth1_macvtap: entered promiscuous mode [ 32.424838][ T3307] veth1_macvtap: entered promiscuous mode [ 32.457803][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.475923][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.485722][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.497313][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.511015][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.523875][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.532614][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.541431][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.550220][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.569284][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.577509][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.586338][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595168][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.603897][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668535][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677352][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686131][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.694995][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.760326][ T3484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 32.766927][ T3484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 32.767308][ T3486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.774610][ T3484] vhci_hcd vhci_hcd.0: Device attached [ 32.781967][ T3486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.819675][ T3486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.827193][ T3486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.976989][ T3489] vhci_hcd: connection closed [ 32.977221][ T373] vhci_hcd: stop threads [ 32.986451][ T373] vhci_hcd: release socket [ 32.990912][ T373] vhci_hcd: disconnect device [ 33.033035][ T1037] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 33.050880][ T1037] usb 5-1: enqueue for inactive port 0 [ 33.065170][ T1037] usb 5-1: enqueue for inactive port 0 [ 33.076195][ T1037] usb 5-1: enqueue for inactive port 0 [ 33.088295][ T3496] loop1: detected capacity change from 0 to 2048 [ 33.142056][ T3496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.173693][ T1037] vhci_hcd: vhci_device speed not set [ 33.197465][ T3496] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.2: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.229856][ T3496] EXT4-fs (loop1): Remounting filesystem read-only [ 33.239196][ T3496] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.524212][ T3496] syz.1.2 (3496) used greatest stack depth: 10752 bytes left [ 33.595551][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.742009][ T3532] infiniband syz1: set active [ 33.746809][ T3532] infiniband syz1: added syz_tun [ 34.209647][ T3532] RDS/IB: syz1: added [ 34.214056][ T3532] smc: adding ib device syz1 with port count 1 [ 34.220242][ T3532] smc: ib device syz1 port 1 has pnetid [ 34.451589][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.458843][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.607321][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.621068][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.771908][ T3534] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.781127][ T3534] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.790340][ T3534] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.799581][ T3534] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.888198][ T1037] syz1: Port: 1 Link DOWN [ 34.904864][ T3556] wireguard0: entered promiscuous mode [ 34.910415][ T3556] wireguard0: entered allmulticast mode [ 34.990772][ T51] bond0: (slave bond_slave_0): interface is now down [ 34.997571][ T51] bond0: (slave bond_slave_1): interface is now down [ 35.013676][ T3560] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 35.025336][ T3560] syz_tun: entered promiscuous mode [ 35.037627][ T51] bond0: (slave bond_slave_0): interface is now down [ 35.044375][ T51] bond0: (slave bond_slave_1): interface is now down [ 35.044888][ T3560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 35.051103][ T51] bond0: (slave syz_tun): interface is now down [ 35.096966][ T51] bond0: now running without any active interface! [ 35.141494][ T3532] syz.2.13 (3532) used greatest stack depth: 10480 bytes left [ 35.219839][ T3565] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 35.390467][ T3566] loop1: detected capacity change from 0 to 512 [ 35.568853][ T3566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.585780][ T3563] Set syz1 is full, maxelem 65536 reached [ 35.687991][ T3586] Zero length message leads to an empty skb [ 35.720744][ T3588] loop0: detected capacity change from 0 to 1024 [ 35.731015][ T3588] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.756476][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.808370][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.200015][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.263975][ T3606] loop1: detected capacity change from 0 to 2048 [ 36.825319][ T3631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 36.835351][ T3630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 36.871702][ T3630] SELinux: failed to load policy [ 36.957797][ T3640] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 37.842492][ T3669] loop0: detected capacity change from 0 to 2048 [ 37.890885][ T3671] rdma_rxe: rxe_newlink: failed to add syz_tun [ 37.956034][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 37.956047][ T29] audit: type=1400 audit(1752363454.581:176): avc: denied { create } for pid=3678 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.019484][ T29] audit: type=1400 audit(1752363454.641:177): avc: denied { bind } for pid=3678 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.039551][ T29] audit: type=1400 audit(1752363454.641:178): avc: denied { create } for pid=3678 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 38.059309][ T29] audit: type=1400 audit(1752363454.641:179): avc: denied { write } for pid=3678 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 38.090236][ T3681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.165955][ T3681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.260392][ T3681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.332178][ T3681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.345290][ T3706] loop1: detected capacity change from 0 to 2048 [ 38.418214][ T3681] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.434376][ T3681] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.450323][ T3681] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.465062][ T3681] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.672090][ T12] bond0: (slave bond_slave_0): interface is now down [ 38.678900][ T12] bond0: (slave bond_slave_1): interface is now down [ 38.713256][ T51] bond0: (slave bond_slave_0): interface is now down [ 38.719986][ T51] bond0: (slave bond_slave_1): interface is now down [ 38.731899][ T51] bond0: now running without any active interface! [ 38.826057][ T3722] Set syz1 is full, maxelem 65536 reached [ 39.348721][ T3750] loop1: detected capacity change from 0 to 1024 [ 39.348960][ T3752] rdma_rxe: rxe_newlink: failed to add syz_tun [ 39.356279][ T3750] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 39.405284][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.490866][ T29] audit: type=1400 audit(1752363456.111:180): avc: denied { ioctl } for pid=3748 comm="syz.1.79" path="/21/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.544084][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.616418][ T3770] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.669632][ T3770] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.690045][ T3789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.91'. [ 39.699057][ T3778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.91'. [ 39.711326][ T3789] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.721052][ T3789] SELinux: failed to load policy [ 39.755973][ T3770] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.849869][ T3770] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.925178][ T3798] loop3: detected capacity change from 0 to 128 [ 39.934688][ T3798] FAT-fs (loop3): Directory bread(block 162) failed [ 39.946711][ T3798] FAT-fs (loop3): Directory bread(block 163) failed [ 39.954397][ T3798] FAT-fs (loop3): Directory bread(block 164) failed [ 39.961184][ T3798] FAT-fs (loop3): Directory bread(block 165) failed [ 39.969837][ T3798] FAT-fs (loop3): Directory bread(block 166) failed [ 39.970957][ T3774] Set syz1 is full, maxelem 65536 reached [ 39.978042][ T3798] FAT-fs (loop3): Directory bread(block 167) failed [ 39.990380][ T3798] FAT-fs (loop3): Directory bread(block 168) failed [ 39.997217][ T3798] FAT-fs (loop3): Directory bread(block 169) failed [ 40.006940][ T3798] FAT-fs (loop3): Directory bread(block 162) failed [ 40.013982][ T3798] FAT-fs (loop3): Directory bread(block 163) failed [ 40.024162][ T3798] syz.3.94: attempt to access beyond end of device [ 40.024162][ T3798] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 40.037294][ T3798] syz.3.94: attempt to access beyond end of device [ 40.037294][ T3798] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 40.056704][ T3798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.064216][ T3798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.072860][ T3798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.080447][ T3798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.699176][ T3820] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 40.705848][ T3820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.713460][ T3820] vhci_hcd vhci_hcd.0: Device attached [ 40.735047][ T3827] vhci_hcd: cannot find the pending unlink 6 [ 40.986839][ T29] audit: type=1400 audit(1752363457.611:181): avc: denied { mounton } for pid=3833 comm="syz.3.106" path="/22/bus" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.128287][ T29] audit: type=1404 audit(1752363457.651:182): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 41.143220][ T29] audit: type=1400 audit(1752363457.651:183): avc: denied { write } for pid=3833 comm="syz.3.106" path="socket:[4989]" dev="sockfs" ino=4989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 41.167167][ T29] audit: type=1400 audit(1752363457.691:184): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.191388][ T29] audit: type=1400 audit(1752363457.731:185): avc: denied { create } for pid=3835 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 41.213363][ T3827] vhci_hcd: connection closed [ 41.213414][ T52] vhci_hcd: stop threads [ 41.222516][ T52] vhci_hcd: release socket [ 41.227056][ T52] vhci_hcd: disconnect device [ 41.263185][ T1037] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 41.270537][ T1037] usb 5-1: enqueue for inactive port 0 [ 41.276365][ T1037] usb 5-1: enqueue for inactive port 0 [ 41.281902][ T1037] usb 5-1: enqueue for inactive port 0 [ 41.353263][ T3844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3844 comm=syz.4.110 [ 41.363008][ T1037] vhci_hcd: vhci_device speed not set [ 41.532437][ T3847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'. [ 41.541674][ T3846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'. [ 41.678178][ T3862] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 41.977376][ T3887] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 41.985383][ T3887] syz_tun: entered promiscuous mode [ 41.994048][ T3887] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 42.003936][ T12] bond0: (slave syz_tun): interface is now down [ 42.023185][ T51] bond0: (slave syz_tun): interface is now down [ 42.029711][ T51] bond0: now running without any active interface! [ 42.310684][ T3907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.318227][ T3907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.326796][ T3907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.334301][ T3907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.385265][ T3913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3913 comm=syz.1.142 [ 42.418952][ T3770] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.430537][ T3770] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.445291][ T3770] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.457211][ T3770] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.610382][ T3931] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 42.618775][ T3931] syz_tun: entered promiscuous mode [ 42.627858][ T3931] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 42.936379][ T3952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.160'. [ 42.945729][ T3951] netlink: 60 bytes leftover after parsing attributes in process `syz.3.160'. [ 42.967140][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 42.967155][ T29] audit: type=1400 audit(1752363459.591:414): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 42.998111][ T29] audit: type=1400 audit(1752363459.601:415): avc: denied { create } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 43.017645][ T29] audit: type=1400 audit(1752363459.601:416): avc: denied { map_create } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.036932][ T29] audit: type=1400 audit(1752363459.601:417): avc: denied { prog_load } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.055924][ T29] audit: type=1400 audit(1752363459.601:418): avc: denied { prog_load } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.074939][ T29] audit: type=1400 audit(1752363459.601:419): avc: denied { create } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 43.094466][ T29] audit: type=1400 audit(1752363459.601:420): avc: denied { create } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 43.113876][ T29] audit: type=1400 audit(1752363459.601:421): avc: denied { bpf } for pid=3954 comm="syz.3.161" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 43.134238][ T29] audit: type=1400 audit(1752363459.601:422): avc: denied { allowed } for pid=3954 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 43.153403][ T29] audit: type=1400 audit(1752363459.611:423): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.194239][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.201535][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.258018][ T3959] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.267048][ T3959] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.276246][ T3959] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.285367][ T3959] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.298625][ T3962] netlink: 'syz.1.164': attribute type 10 has an invalid length. [ 43.475378][ T3984] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'. [ 43.484675][ T3979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'. [ 43.512401][ T3986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 43.513874][ T3990] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 43.519030][ T3986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.534383][ T3986] vhci_hcd vhci_hcd.0: Device attached [ 43.543609][ T3994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3994 comm=syz.3.174 [ 43.565692][ T3988] vhci_hcd: connection closed [ 43.565917][ T12] vhci_hcd: stop threads [ 43.575054][ T12] vhci_hcd: release socket [ 43.579490][ T12] vhci_hcd: disconnect device [ 43.708154][ T4009] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.715351][ T4009] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.772031][ T4009] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.781213][ T4009] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.790315][ T4009] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.799360][ T4009] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.081111][ T4016] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 44.089086][ T4016] veth1_macvtap: left promiscuous mode [ 44.096546][ T4016] batman_adv: batadv0: Adding interface: macsec0 [ 44.102906][ T4016] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.128369][ T4016] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 44.407188][ T4033] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 44.449377][ T4039] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 44.455963][ T4039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.463612][ T4039] vhci_hcd vhci_hcd.0: Device attached [ 44.469545][ T4040] vhci_hcd: cannot find the pending unlink 6 [ 44.475793][ T4040] vhci_hcd: connection closed [ 44.475950][ T12] vhci_hcd: stop threads [ 44.485055][ T12] vhci_hcd: release socket [ 44.489537][ T12] vhci_hcd: disconnect device [ 44.797360][ T4047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 44.803905][ T4047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.811834][ T4047] vhci_hcd vhci_hcd.0: Device attached [ 44.818285][ T4048] vhci_hcd: cannot find the pending unlink 6 [ 44.828202][ T4048] vhci_hcd: connection closed [ 44.828329][ T31] vhci_hcd: stop threads [ 44.837349][ T31] vhci_hcd: release socket [ 44.841788][ T31] vhci_hcd: disconnect device [ 44.990321][ T4055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.997848][ T4055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.005620][ T4055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.013237][ T4055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.020744][ T4055] batman_adv: batadv0: Removing interface: macsec0 [ 45.302646][ T4081] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 45.309201][ T4081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.316751][ T4081] vhci_hcd vhci_hcd.0: Device attached [ 45.322632][ T4083] vhci_hcd: cannot find the pending unlink 6 [ 45.328945][ T4083] vhci_hcd: connection closed [ 45.329112][ T12] vhci_hcd: stop threads [ 45.338160][ T12] vhci_hcd: release socket [ 45.342605][ T12] vhci_hcd: disconnect device [ 45.353271][ T4087] netlink: 60 bytes leftover after parsing attributes in process `syz.2.215'. [ 45.362765][ T4082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.215'. [ 45.388147][ T4090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 45.394699][ T4090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.402342][ T4090] vhci_hcd vhci_hcd.0: Device attached [ 45.410310][ T4091] vhci_hcd: connection closed [ 45.410458][ T52] vhci_hcd: stop threads [ 45.419504][ T52] vhci_hcd: release socket [ 45.423977][ T52] vhci_hcd: disconnect device [ 45.909549][ T4115] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 45.919350][ T4115] syz_tun: entered promiscuous mode [ 45.928463][ T4115] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 45.969300][ T4124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.229'. [ 45.978378][ T4117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.229'. [ 46.042496][ T4135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4135 comm=syz.1.237 [ 46.196548][ T4146] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 46.236377][ T4150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 46.242968][ T4150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.250643][ T4150] vhci_hcd vhci_hcd.0: Device attached [ 46.257019][ T4151] vhci_hcd: cannot find the pending unlink 6 [ 46.264953][ T4151] vhci_hcd: connection closed [ 46.265011][ T12] vhci_hcd: stop threads [ 46.273983][ T12] vhci_hcd: release socket [ 46.278471][ T12] vhci_hcd: disconnect device [ 46.429708][ T4160] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 46.432293][ T4163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.247'. [ 46.436249][ T4160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.436398][ T4160] vhci_hcd vhci_hcd.0: Device attached [ 46.445505][ T4158] netlink: 60 bytes leftover after parsing attributes in process `syz.2.247'. [ 46.459646][ T4161] vhci_hcd: connection closed [ 46.478034][ T12] vhci_hcd: stop threads [ 46.487197][ T12] vhci_hcd: release socket [ 46.491632][ T12] vhci_hcd: disconnect device [ 46.788334][ T4189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4189 comm=syz.0.259 [ 46.868338][ T4192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.260'. [ 46.877618][ T4191] netlink: 60 bytes leftover after parsing attributes in process `syz.0.260'. [ 47.052502][ T4211] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 47.082401][ T4213] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 47.089039][ T4213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.096688][ T4213] vhci_hcd vhci_hcd.0: Device attached [ 47.103588][ T4214] vhci_hcd: cannot find the pending unlink 6 [ 47.109622][ T4214] vhci_hcd: connection closed [ 47.109914][ T12] vhci_hcd: stop threads [ 47.113194][ T4217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4217 comm=syz.3.271 [ 47.114634][ T12] vhci_hcd: release socket [ 47.114642][ T12] vhci_hcd: disconnect device [ 47.425935][ T4245] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 47.432566][ T4245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.440156][ T4245] vhci_hcd vhci_hcd.0: Device attached [ 47.447618][ T4246] vhci_hcd: connection closed [ 47.447789][ T52] vhci_hcd: stop threads [ 47.456780][ T52] vhci_hcd: release socket [ 47.461264][ T52] vhci_hcd: disconnect device [ 47.652292][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.659625][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.713351][ T4253] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.722314][ T4253] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.731236][ T4253] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.740380][ T4253] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.838463][ T4259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.289'. [ 47.847612][ T4258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.289'. [ 47.986674][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 47.986687][ T29] audit: type=1400 audit(1752363464.611:1178): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.052404][ T29] audit: type=1400 audit(1752363464.641:1179): avc: denied { read write } for pid=4269 comm="syz.4.295" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 48.054584][ T4273] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 48.076078][ T29] audit: type=1400 audit(1752363464.641:1180): avc: denied { read } for pid=4269 comm="syz.4.295" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 48.076107][ T29] audit: type=1400 audit(1752363464.651:1181): avc: denied { create } for pid=4269 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 48.125345][ T29] audit: type=1400 audit(1752363464.651:1182): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.157242][ T29] audit: type=1400 audit(1752363464.671:1183): avc: denied { create } for pid=4272 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 48.176974][ T29] audit: type=1400 audit(1752363464.711:1184): avc: denied { create } for pid=4271 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 48.196682][ T29] audit: type=1400 audit(1752363464.771:1185): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.220945][ T29] audit: type=1400 audit(1752363464.781:1186): avc: denied { allowed } for pid=4275 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 48.240198][ T29] audit: type=1400 audit(1752363464.781:1187): avc: denied { create } for pid=4275 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 48.537623][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.544824][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.599918][ T4304] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.608437][ T4304] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.617004][ T4304] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.625622][ T4304] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.979147][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.002450][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.422741][ T4378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4378 comm=syz.1.340 [ 49.823044][ T4402] ================================================================== [ 49.831216][ T4402] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 49.838543][ T4402] [ 49.840894][ T4402] write to 0xffff88811b92d548 of 4 bytes by task 4403 on cpu 0: [ 49.848542][ T4402] touch_atime+0x1e8/0x340 [ 49.852989][ T4402] shmem_file_read_iter+0x477/0x540 [ 49.858215][ T4402] copy_splice_read+0x3c1/0x5f0 [ 49.863092][ T4402] splice_direct_to_actor+0x290/0x680 [ 49.868486][ T4402] do_splice_direct+0xda/0x150 [ 49.873283][ T4402] do_sendfile+0x380/0x650 [ 49.877738][ T4402] __x64_sys_sendfile64+0x105/0x150 [ 49.882969][ T4402] x64_sys_call+0xb39/0x2fb0 [ 49.887586][ T4402] do_syscall_64+0xd2/0x200 [ 49.892109][ T4402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.898032][ T4402] [ 49.900376][ T4402] read to 0xffff88811b92d548 of 4 bytes by task 4402 on cpu 1: [ 49.907940][ T4402] atime_needs_update+0x25f/0x3e0 [ 49.913003][ T4402] touch_atime+0x4a/0x340 [ 49.917359][ T4402] shmem_file_read_iter+0x477/0x540 [ 49.922568][ T4402] copy_splice_read+0x3c1/0x5f0 [ 49.927459][ T4402] splice_direct_to_actor+0x290/0x680 [ 49.932878][ T4402] do_splice_direct+0xda/0x150 [ 49.937675][ T4402] do_sendfile+0x380/0x650 [ 49.942124][ T4402] __x64_sys_sendfile64+0x105/0x150 [ 49.947351][ T4402] x64_sys_call+0xb39/0x2fb0 [ 49.951972][ T4402] do_syscall_64+0xd2/0x200 [ 49.956509][ T4402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.962435][ T4402] [ 49.964766][ T4402] value changed: 0x1a4caeca -> 0x1ae5454a [ 49.970489][ T4402] [ 49.972822][ T4402] Reported by Kernel Concurrency Sanitizer on: [ 49.979000][ T4402] CPU: 1 UID: 0 PID: 4402 Comm: syz.1.350 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 49.991346][ T4402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.001414][ T4402] ==================================================================