last executing test programs: 16.607360971s ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x6e2e5000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') 16.524533597s ago: executing program 3 (id=159): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 16.460026933s ago: executing program 3 (id=161): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62066bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) close_range(r0, r1, 0x0) 16.371985829s ago: executing program 3 (id=163): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x1}, 0x0, 0x1010000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 16.109074101s ago: executing program 3 (id=167): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xcb9c, 0x13200, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x0) 15.86757582s ago: executing program 3 (id=173): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r3}, 0xc) 15.86740183s ago: executing program 32 (id=173): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r3}, 0xc) 14.647353439s ago: executing program 0 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x3, 0x0, 0x0, 0xfee, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 14.552409456s ago: executing program 0 (id=195): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14.515815269s ago: executing program 0 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RLERROR(r4, &(0x7f0000000100)={0x16, 0x7, 0x2, {0xd, 'bond_slave_0\x00'}}, 0x16) 13.63892952s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 13.583680205s ago: executing program 0 (id=209): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2c020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 13.298120347s ago: executing program 0 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 13.298007118s ago: executing program 33 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.707651431s ago: executing program 2 (id=340): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008888}, 0x40c0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000804) socket$inet6(0xa, 0xa, 0xfff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x400000ffc020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sync() 3.698529101s ago: executing program 5 (id=341): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r4, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r2, &(0x7f0000000540)=""/217, 0xd9) 3.630791967s ago: executing program 5 (id=342): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1c7, 0x2}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x2a) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 3.444201072s ago: executing program 2 (id=343): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioprio_get$pid(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.443996372s ago: executing program 5 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.323031012s ago: executing program 2 (id=345): openat$rfkill(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) io_uring_setup(0x2e34, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) 2.872657438s ago: executing program 4 (id=348): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) signalfd4(r1, &(0x7f00000001c0)={[0x200000009]}, 0x8, 0x1000) 2.636790487s ago: executing program 6 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0, r2}, 0x18) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 2.498711318s ago: executing program 5 (id=350): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 2.463029781s ago: executing program 4 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 2.302012354s ago: executing program 2 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r0) 1.797246265s ago: executing program 2 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1.558763914s ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.529406426s ago: executing program 6 (id=357): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62066bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 1.519456427s ago: executing program 2 (id=359): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 1.222572691s ago: executing program 5 (id=360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x600, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.218864961s ago: executing program 1 (id=370): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x26000400) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.153203047s ago: executing program 5 (id=361): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xffffffee, 0x800, 0x103fc, 0x159}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000048bb1dd806bed6e2052b40437b2b2416d0cea91865cbc16f35256678bb34dfb32c4bdbf19da72ed28a9bcc0eeade3698c31a59b57431705f542c462cef8a045dd8dd5c1216dd24d308c3ddd70be2c1", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.149613617s ago: executing program 6 (id=372): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000003f696cd0000000000008000b700001000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xc, 0xb1, 0x1, 0x1, 0x0, 0x1, 0x2, 0xab2cd1a375d1bc89, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1749, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x200, 0xfffffffffffffff7, 0x1, 0x8, 0x9, 0x4, 0x5, 0x0, 0x5}, r1, 0x2, 0xffffffffffffffff, 0x6) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 1.037950726s ago: executing program 1 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2000000015, 0x80005, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setgroups(0x1, &(0x7f0000000680)=[0x0]) setregid(0x0, 0x0) 985.21406ms ago: executing program 1 (id=363): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0xb, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffe44}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 855.351091ms ago: executing program 1 (id=364): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x66be96ba}, 0x18) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) 854.607181ms ago: executing program 6 (id=365): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 840.051502ms ago: executing program 1 (id=366): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="6402a6c6a113", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 803.436765ms ago: executing program 6 (id=367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 711.818272ms ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 506.189459ms ago: executing program 4 (id=369): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r4, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r2, &(0x7f0000000540)=""/217, 0xd9) 234.19µs ago: executing program 1 (id=371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 0s ago: executing program 4 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x66) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. [ 21.653674][ T29] audit: type=1400 audit(1755730921.548:62): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.654444][ T3285] cgroup: Unknown subsys name 'net' [ 21.676439][ T29] audit: type=1400 audit(1755730921.548:63): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.703762][ T29] audit: type=1400 audit(1755730921.578:64): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.852104][ T3285] cgroup: Unknown subsys name 'cpuset' [ 21.858163][ T3285] cgroup: Unknown subsys name 'rlimit' [ 22.006948][ T29] audit: type=1400 audit(1755730921.898:65): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.030258][ T29] audit: type=1400 audit(1755730921.898:66): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.050802][ T29] audit: type=1400 audit(1755730921.898:67): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.058450][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.071277][ T29] audit: type=1400 audit(1755730921.898:68): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.100133][ T29] audit: type=1400 audit(1755730921.908:69): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.124957][ T29] audit: type=1400 audit(1755730921.908:70): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.148207][ T29] audit: type=1400 audit(1755730921.978:71): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.181895][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.289898][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 23.351641][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 23.376686][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.390511][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 23.422000][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 23.449527][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.456669][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.463874][ T3298] bridge_slave_0: entered allmulticast mode [ 23.470184][ T3298] bridge_slave_0: entered promiscuous mode [ 23.476704][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.483831][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.490966][ T3298] bridge_slave_1: entered allmulticast mode [ 23.497893][ T3298] bridge_slave_1: entered promiscuous mode [ 23.531989][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.543927][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.587327][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.594502][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.601626][ T3302] bridge_slave_0: entered allmulticast mode [ 23.607992][ T3302] bridge_slave_0: entered promiscuous mode [ 23.616585][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.623755][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.630887][ T3305] bridge_slave_0: entered allmulticast mode [ 23.637263][ T3305] bridge_slave_0: entered promiscuous mode [ 23.648854][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.655952][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.663027][ T3297] bridge_slave_0: entered allmulticast mode [ 23.669146][ T3297] bridge_slave_0: entered promiscuous mode [ 23.675582][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.682736][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.689865][ T3302] bridge_slave_1: entered allmulticast mode [ 23.696053][ T3302] bridge_slave_1: entered promiscuous mode [ 23.704276][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.711322][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.718572][ T3305] bridge_slave_1: entered allmulticast mode [ 23.724883][ T3305] bridge_slave_1: entered promiscuous mode [ 23.731506][ T3298] team0: Port device team_slave_0 added [ 23.742455][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.749618][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.756695][ T3297] bridge_slave_1: entered allmulticast mode [ 23.763092][ T3297] bridge_slave_1: entered promiscuous mode [ 23.787356][ T3298] team0: Port device team_slave_1 added [ 23.807672][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.817807][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.837326][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.846674][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.853695][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.879881][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.891852][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.904873][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.912005][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.919126][ T3300] bridge_slave_0: entered allmulticast mode [ 23.925553][ T3300] bridge_slave_0: entered promiscuous mode [ 23.932776][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.947152][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.954144][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.980053][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.991641][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.006400][ T3302] team0: Port device team_slave_0 added [ 24.012263][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.019463][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.026693][ T3300] bridge_slave_1: entered allmulticast mode [ 24.033178][ T3300] bridge_slave_1: entered promiscuous mode [ 24.050347][ T3302] team0: Port device team_slave_1 added [ 24.066669][ T3305] team0: Port device team_slave_0 added [ 24.088119][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.097698][ T3305] team0: Port device team_slave_1 added [ 24.103845][ T3297] team0: Port device team_slave_0 added [ 24.114124][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.121093][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.147089][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.158666][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.182725][ T3297] team0: Port device team_slave_1 added [ 24.193273][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.200195][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.226280][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.249706][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.256771][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.282834][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.295486][ T3298] hsr_slave_0: entered promiscuous mode [ 24.302128][ T3298] hsr_slave_1: entered promiscuous mode [ 24.311795][ T3300] team0: Port device team_slave_0 added [ 24.318145][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.325280][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.351191][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.368608][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.375560][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.401549][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.430167][ T3300] team0: Port device team_slave_1 added [ 24.435983][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.442938][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.468837][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.489031][ T3302] hsr_slave_0: entered promiscuous mode [ 24.495030][ T3302] hsr_slave_1: entered promiscuous mode [ 24.500876][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 24.506620][ T3302] Cannot create hsr debugfs directory [ 24.534536][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.541522][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.567491][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.590812][ T3297] hsr_slave_0: entered promiscuous mode [ 24.596869][ T3297] hsr_slave_1: entered promiscuous mode [ 24.602817][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 24.608603][ T3297] Cannot create hsr debugfs directory [ 24.619524][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.626528][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.652518][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.666963][ T3305] hsr_slave_0: entered promiscuous mode [ 24.672991][ T3305] hsr_slave_1: entered promiscuous mode [ 24.678676][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 24.684407][ T3305] Cannot create hsr debugfs directory [ 24.764366][ T3300] hsr_slave_0: entered promiscuous mode [ 24.770430][ T3300] hsr_slave_1: entered promiscuous mode [ 24.776293][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 24.782070][ T3300] Cannot create hsr debugfs directory [ 24.894086][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.906709][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.917916][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.929219][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.951033][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.959855][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.972989][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.984138][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.997386][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.012174][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.020583][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.034444][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.071720][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.080857][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.098934][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.116340][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.126003][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.140988][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.150596][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.160118][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.181377][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.196260][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.208020][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.231923][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.242389][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.258963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.266053][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.274279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.281366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.298089][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.309958][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.317040][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.338638][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.359726][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.366819][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.400933][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.425482][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.436958][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.448687][ T274] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.455801][ T274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.483420][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.490583][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.506698][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.522981][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.533482][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.549412][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.556514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.577993][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.586471][ T274] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.593570][ T274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.609064][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.620765][ T3298] veth0_vlan: entered promiscuous mode [ 25.643875][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.653173][ T3298] veth1_vlan: entered promiscuous mode [ 25.668977][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.676090][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.693143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.700226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.718816][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.748391][ T3298] veth0_macvtap: entered promiscuous mode [ 25.774361][ T3298] veth1_macvtap: entered promiscuous mode [ 25.787121][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.808320][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.871998][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.894174][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.917076][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.936207][ T3302] veth0_vlan: entered promiscuous mode [ 25.942088][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.951271][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.959990][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.992541][ T3302] veth1_vlan: entered promiscuous mode [ 26.003841][ T3297] veth0_vlan: entered promiscuous mode [ 26.022257][ T3297] veth1_vlan: entered promiscuous mode [ 26.029516][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.066417][ T3305] veth0_vlan: entered promiscuous mode [ 26.080252][ T3465] loop3: detected capacity change from 0 to 512 [ 26.091965][ T3302] veth0_macvtap: entered promiscuous mode [ 26.106982][ T3465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.120737][ T3302] veth1_macvtap: entered promiscuous mode [ 26.127158][ T3465] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 26.129267][ T3297] veth0_macvtap: entered promiscuous mode [ 26.149109][ T3305] veth1_vlan: entered promiscuous mode [ 26.164578][ T3297] veth1_macvtap: entered promiscuous mode [ 26.165118][ T3465] EXT4-fs (loop3): shut down requested (0) [ 26.176981][ T3305] veth0_macvtap: entered promiscuous mode [ 26.189714][ T3465] Zero length message leads to an empty skb [ 26.193577][ T3300] veth0_vlan: entered promiscuous mode [ 26.207051][ T3305] veth1_macvtap: entered promiscuous mode [ 26.218858][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.226816][ T3300] veth1_vlan: entered promiscuous mode [ 26.237084][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.245232][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.253873][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.264105][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.274870][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.288603][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.296471][ T3300] veth0_macvtap: entered promiscuous mode [ 26.312198][ T3300] veth1_macvtap: entered promiscuous mode [ 26.329979][ C0] hrtimer: interrupt took 53010 ns [ 26.337890][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.353318][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.365603][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.380094][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.405650][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.439466][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.480543][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.506326][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.541477][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.544965][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 26.552972][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.578372][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.589652][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.611525][ T3483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.629991][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.638726][ T3485] Unsupported xt match [ 26.638745][ T3485] unable to load match [ 26.650262][ T3488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 26.659391][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.685854][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.700983][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 26.701000][ T29] audit: type=1400 audit(1755730926.588:118): avc: denied { tracepoint } for pid=3490 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.705281][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.772390][ T146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.781441][ T29] audit: type=1400 audit(1755730926.668:119): avc: denied { execute } for pid=3490 comm="syz.0.8" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 26.812009][ T146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.822999][ T146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.839515][ T29] audit: type=1400 audit(1755730926.678:120): avc: denied { create } for pid=3490 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.859771][ T29] audit: type=1400 audit(1755730926.728:121): avc: denied { create } for pid=3494 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.859898][ T29] audit: type=1326 audit(1755730926.728:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 26.859921][ T29] audit: type=1326 audit(1755730926.728:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 26.859970][ T29] audit: type=1326 audit(1755730926.728:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 26.859992][ T29] audit: type=1326 audit(1755730926.728:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 26.860088][ T29] audit: type=1326 audit(1755730926.728:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 26.891203][ T146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.913420][ T29] audit: type=1326 audit(1755730926.748:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 26.996807][ T3493] loop2: detected capacity change from 0 to 128 [ 27.426941][ T3573] tipc: Failed to remove unknown binding: 66,3,3/0:632913611/632913612 [ 27.474771][ T3575] loop3: detected capacity change from 0 to 512 [ 27.491750][ T3578] netlink: 'syz.1.16': attribute type 12 has an invalid length. [ 27.505875][ T3579] loop4: detected capacity change from 0 to 1024 [ 27.536263][ T3575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.560776][ T3579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.570457][ T3575] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.600202][ T3579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 27.621335][ T3579] System zones: 0-1, 3-36 [ 27.627454][ T3579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.672982][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.682930][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.057310][ T3617] netlink: zone id is out of range [ 28.075879][ T3617] netlink: zone id is out of range [ 28.089323][ T3617] netlink: zone id is out of range [ 28.094625][ T3617] netlink: zone id is out of range [ 28.122117][ T3617] netlink: zone id is out of range [ 28.131264][ T3617] netlink: zone id is out of range [ 28.138687][ T3617] netlink: zone id is out of range [ 28.146926][ T3617] netlink: zone id is out of range [ 28.156565][ T3617] netlink: zone id is out of range [ 28.164965][ T3617] netlink: zone id is out of range [ 28.204518][ T3634] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 29.209663][ T3742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.47'. [ 29.428779][ T3750] tipc: Started in network mode [ 29.433750][ T3750] tipc: Node identity 262f44d61c63, cluster identity 4711 [ 29.440941][ T3750] tipc: Enabled bearer , priority 0 [ 29.511340][ T3745] tipc: Resetting bearer [ 29.534423][ T3745] tipc: Disabling bearer [ 29.567818][ T3754] tipc: Started in network mode [ 29.572877][ T3754] tipc: Node identity 4e4a7c15a467, cluster identity 4711 [ 29.577953][ T10] Process accounting resumed [ 29.580077][ T3754] tipc: Enabled bearer , priority 0 [ 29.595965][ T3754] tipc: Disabling bearer [ 29.615101][ T3758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.650611][ T3760] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 29.673102][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 29.728010][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 29.756153][ T3772] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.762240][ T3769] 9pnet_fd: Insufficient options for proto=fd [ 29.803108][ T3775] netlink: '+}[@': attribute type 10 has an invalid length. [ 29.830287][ T3775] team0: Port device dummy0 added [ 29.845984][ T3775] netlink: '+}[@': attribute type 10 has an invalid length. [ 29.875974][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 29.885837][ T3775] team0: Port device dummy0 removed [ 29.907844][ T3775] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 29.920574][ T3787] lo speed is unknown, defaulting to 1000 [ 29.926842][ T3787] lo speed is unknown, defaulting to 1000 [ 29.934502][ T3787] lo speed is unknown, defaulting to 1000 [ 29.938024][ T3775] +}[@ (3775) used greatest stack depth: 10688 bytes left [ 29.956749][ T3787] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 29.969532][ T3787] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 29.980411][ T3789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.67'. [ 29.983272][ T3791] ------------[ cut here ]------------ [ 29.989251][ T3789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 29.994726][ T3791] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 30.003526][ T3789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.67'. [ 30.021703][ T3791] WARNING: CPU: 0 PID: 3791 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 30.040863][ T3791] Modules linked in: [ 30.044819][ T3791] CPU: 0 UID: 0 PID: 3791 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT(voluntary) [ 30.054687][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.064816][ T3791] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 30.066701][ T3787] lo speed is unknown, defaulting to 1000 [ 30.071100][ T3791] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 b2 7f ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 30.077530][ T3787] lo speed is unknown, defaulting to 1000 [ 30.096613][ T3791] RSP: 0018:ffffc90003197440 EFLAGS: 00010292 [ 30.096640][ T3791] RAX: 52fc3180d32ab200 RBX: ffff88811d4b5b10 RCX: 0000000000080000 [ 30.096655][ T3791] RDX: ffffc900022ca000 RSI: 000000000005e6f2 RDI: 000000000005e6f3 [ 30.103260][ T3787] lo speed is unknown, defaulting to 1000 [ 30.108575][ T3791] RBP: 0000000000000000 R08: 0001ffff86a20b4f R09: 0000000000000000 [ 30.108593][ T3791] R10: ffffffff88e65958 R11: ffffffff82201b60 R12: ffff88811d4b5ad0 [ 30.108605][ T3791] R13: ffff88811d498000 R14: ffff88811d498000 R15: ffff88811d4b5b08 [ 30.108617][ T3791] FS: 00007f5a9b75f6c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 30.108635][ T3791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.116959][ T3787] lo speed is unknown, defaulting to 1000 [ 30.124740][ T3791] CR2: fffffffff0000000 CR3: 000000011c78a000 CR4: 00000000003506f0 [ 30.130950][ T3787] lo speed is unknown, defaulting to 1000 [ 30.138442][ T3791] Call Trace: [ 30.138453][ T3791] [ 30.195892][ T3791] reg_set_min_max+0x215/0x260 [ 30.200702][ T3791] check_cond_jmp_op+0x1013/0x16e0 [ 30.205899][ T3791] do_check+0x332a/0x7a10 [ 30.210288][ T3791] do_check_common+0xc3a/0x12a0 [ 30.215196][ T3791] bpf_check+0x942b/0xd9e0 [ 30.219672][ T3791] ? __rcu_read_unlock+0x4f/0x70 [ 30.224677][ T3791] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 30.230766][ T3791] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 30.236461][ T3791] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 30.242427][ T3791] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 30.248524][ T3791] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 30.254720][ T3791] ? css_rstat_updated+0xb7/0x240 [ 30.259838][ T3791] ? __rcu_read_unlock+0x4f/0x70 [ 30.264968][ T3791] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 30.270803][ T3791] ? should_fail_ex+0x30/0x280 [ 30.275711][ T3791] ? selinux_bpf_prog_load+0x36/0xf0 [ 30.281077][ T3791] ? should_failslab+0x8c/0xb0 [ 30.285987][ T3791] ? __kmalloc_cache_noprof+0x189/0x320 [ 30.291601][ T3791] ? selinux_bpf_prog_load+0xbf/0xf0 [ 30.297181][ T3791] ? security_bpf_prog_load+0x2c/0xa0 [ 30.302641][ T3791] bpf_prog_load+0xedd/0x1070 [ 30.307415][ T3791] ? security_bpf+0x2b/0x90 [ 30.312032][ T3791] __sys_bpf+0x462/0x7b0 [ 30.316322][ T3791] __x64_sys_bpf+0x41/0x50 [ 30.320764][ T3791] x64_sys_call+0x2aea/0x2ff0 [ 30.325617][ T3791] do_syscall_64+0xd2/0x200 [ 30.330365][ T3791] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.336501][ T3791] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 30.342456][ T3791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.348452][ T3791] RIP: 0033:0x7f5a9ccfebe9 [ 30.353034][ T3791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.372709][ T3791] RSP: 002b:00007f5a9b75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.381193][ T3791] RAX: ffffffffffffffda RBX: 00007f5a9cf25fa0 RCX: 00007f5a9ccfebe9 [ 30.389275][ T3791] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 30.397313][ T3791] RBP: 00007f5a9cd81e19 R08: 0000000000000000 R09: 0000000000000000 [ 30.405323][ T3791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.413339][ T3791] R13: 00007f5a9cf26038 R14: 00007f5a9cf25fa0 R15: 00007ffcc7e78f18 [ 30.421446][ T3791] [ 30.424505][ T3791] ---[ end trace 0000000000000000 ]--- [ 30.566781][ T3791] syz.1.68 (3791) used greatest stack depth: 10328 bytes left [ 31.001021][ T3813] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 31.176651][ T3813] 9pnet_fd: Insufficient options for proto=fd [ 31.221998][ T3813] cgroup: Invalid name [ 31.227233][ T3816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3816 comm=syz.2.77 [ 31.311852][ T3824] 8021q: VLANs not supported on wg2 [ 31.631739][ T3833] lo speed is unknown, defaulting to 1000 [ 31.659434][ T3839] IPv6: Can't replace route, no match found [ 31.832337][ T3859] lo speed is unknown, defaulting to 1000 [ 31.996959][ T3867] netlink: 'syz.0.91': attribute type 13 has an invalid length. [ 32.004694][ T3867] netlink: 'syz.0.91': attribute type 14 has an invalid length. [ 32.054747][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 32.054765][ T29] audit: type=1400 audit(1755730931.948:349): avc: denied { cpu } for pid=3853 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.150846][ T3870] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 32.249943][ T29] audit: type=1400 audit(1755730932.138:350): avc: denied { bind } for pid=3874 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.269477][ T29] audit: type=1400 audit(1755730932.138:351): avc: denied { name_bind } for pid=3874 comm="syz.0.94" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.291191][ T29] audit: type=1400 audit(1755730932.138:352): avc: denied { node_bind } for pid=3874 comm="syz.0.94" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 32.315193][ T3878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 32.322537][ T3878] IPv6: NLM_F_CREATE should be set when creating new route [ 32.329812][ T3878] IPv6: NLM_F_CREATE should be set when creating new route [ 32.353338][ T3878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 32.476596][ T3889] lo speed is unknown, defaulting to 1000 [ 32.550931][ T29] audit: type=1400 audit(1755730932.438:353): avc: denied { write } for pid=3895 comm="syz.2.102" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.551606][ T3896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.622474][ T29] audit: type=1400 audit(1755730932.438:354): avc: denied { ioctl } for pid=3895 comm="syz.2.102" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.629795][ T3896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.687684][ T3899] loop4: detected capacity change from 0 to 2048 [ 32.752027][ T29] audit: type=1400 audit(1755730932.638:355): avc: denied { bind } for pid=3907 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.756887][ T3899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.772225][ T29] audit: type=1400 audit(1755730932.648:356): avc: denied { setopt } for pid=3907 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.807934][ T3908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.828474][ T29] audit: type=1400 audit(1755730932.718:357): avc: denied { setopt } for pid=3895 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 32.854903][ T3913] loop3: detected capacity change from 0 to 128 [ 32.886691][ T3908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.911359][ T3913] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.948816][ T3918] loop0: detected capacity change from 0 to 512 [ 32.957070][ T3913] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.972987][ T3908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.995752][ T3918] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 33.011495][ T3918] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.082983][ T3918] EXT4-fs (loop0): mount failed [ 33.090524][ T3908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.125242][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.161330][ T3565] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.173205][ T3565] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.206047][ T3565] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217849][ T3565] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.380685][ T3933] loop2: detected capacity change from 0 to 2048 [ 33.429097][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 33.500987][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.573980][ T3948] __nla_validate_parse: 5 callbacks suppressed [ 33.573997][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 33.602961][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.606354][ T3944] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 33.610373][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.625882][ T3944] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.635773][ T3951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 33.637654][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.646604][ T3951] loop9: detected capacity change from 0 to 7 [ 33.652123][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.652432][ T3944] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1778 with error 28 [ 33.677886][ T3944] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.677886][ T3944] [ 33.682080][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.687542][ T3944] EXT4-fs (loop2): Total free blocks count 0 [ 33.687560][ T3944] EXT4-fs (loop2): Free/Dirty block details [ 33.698128][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.701470][ T3944] EXT4-fs (loop2): free_blocks=2415919104 [ 33.707371][ T3287] loop9: unable to read partition table [ 33.715159][ T3944] EXT4-fs (loop2): dirty_blocks=1792 [ 33.715240][ T3944] EXT4-fs (loop2): Block reservation details [ 33.737947][ T3944] EXT4-fs (loop2): i_reserved_data_blocks=112 [ 33.745446][ T3951] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.753490][ T3951] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.761513][ T3951] loop9: unable to read partition table [ 33.772755][ T3951] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 33.772755][ T3951] ) failed (rc=-5) [ 33.786597][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.805055][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.822507][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.830624][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.839274][ T3287] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.851552][ T3956] process 'syz.0.123' launched './file0' with NULL argv: empty string added [ 33.892873][ T3958] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.908728][ T3944] syz.2.115 (3944) used greatest stack depth: 10120 bytes left [ 33.936016][ T3512] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 33.982928][ T3958] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.000596][ T3969] pim6reg1: entered promiscuous mode [ 34.006038][ T3969] pim6reg1: entered allmulticast mode [ 34.013053][ T3972] bridge0: entered allmulticast mode [ 34.027706][ T3972] pim6reg: entered allmulticast mode [ 34.033480][ T3974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 34.074940][ T3978] loop4: detected capacity change from 0 to 512 [ 34.092913][ T3958] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.106978][ T3978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.120270][ T3978] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.130873][ T3977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3977 comm=syz.3.132 [ 34.152034][ T3978] EXT4-fs (loop4): 1 truncate cleaned up [ 34.158458][ T3978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.175873][ T3986] ref_ctr increment failed for inode: 0xd1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810ca21cc0 [ 34.189210][ T3958] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.205477][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.212917][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.224558][ T3986] uprobe: syz.0.135:3986 failed to unregister, leaking uprobe [ 34.240185][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.330259][ T3994] netlink: 14 bytes leftover after parsing attributes in process `syz.0.139'. [ 34.341068][ T3994] hsr_slave_0: left promiscuous mode [ 34.342690][ T3996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.140'. [ 34.355507][ T3994] hsr_slave_1: left promiscuous mode [ 34.390892][ T3996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3996 comm=syz.4.140 [ 34.435437][ T4001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 34.469233][ T4001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4001 comm=syz.4.142 [ 34.485029][ T4005] bridge0: entered promiscuous mode [ 34.490383][ T4005] macsec1: entered promiscuous mode [ 34.497931][ T4005] bridge0: port 3(macsec1) entered blocking state [ 34.504670][ T4005] bridge0: port 3(macsec1) entered disabled state [ 34.511907][ T4005] macsec1: entered allmulticast mode [ 34.517234][ T4005] bridge0: entered allmulticast mode [ 34.524666][ T4005] macsec1: left allmulticast mode [ 34.529741][ T4005] bridge0: left allmulticast mode [ 34.537145][ T4005] bridge0: left promiscuous mode [ 34.545561][ T4001] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 34.635662][ T4012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 34.644688][ T4012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.147'. [ 34.653635][ T4012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 34.663641][ T4012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.147'. [ 34.679378][ T4014] loop0: detected capacity change from 0 to 512 [ 34.691909][ T4014] ext4: Unknown parameter 'euid>00000000000000000000' [ 34.758607][ T4020] 9pnet_fd: Insufficient options for proto=fd [ 34.980450][ T4030] lo speed is unknown, defaulting to 1000 [ 35.246778][ T4041] syz.2.158 (4041) used greatest stack depth: 9520 bytes left [ 35.357402][ T4051] loop3: detected capacity change from 0 to 512 [ 35.408470][ T4051] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.465104][ T4051] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.163: Failed to acquire dquot type 0 [ 35.488963][ T4051] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 35.505607][ T4062] syz.2.165 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.596483][ T3298] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /27/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 35.709418][ T4067] loop2: detected capacity change from 0 to 128 [ 35.720326][ T4067] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.734596][ T4067] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.808953][ T3552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.826162][ T4075] lo speed is unknown, defaulting to 1000 [ 35.849717][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.874174][ T3552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.944446][ T3552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.984961][ T4079] lo speed is unknown, defaulting to 1000 [ 36.018351][ T3552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.068666][ T4079] chnl_net:caif_netlink_parms(): no params data found [ 36.094366][ T4089] team0 (unregistering): Port device team_slave_0 removed [ 36.104472][ T4089] team0 (unregistering): Port device team_slave_1 removed [ 36.207714][ T3552] bridge_slave_1: left allmulticast mode [ 36.213561][ T3552] bridge_slave_1: left promiscuous mode [ 36.219363][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.231578][ T3552] bridge_slave_0: left allmulticast mode [ 36.237253][ T3552] bridge_slave_0: left promiscuous mode [ 36.243057][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.319636][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.329840][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.350444][ T3552] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 36.370151][ T3552] bond0 (unregistering): Released all slaves [ 36.405747][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.413003][ T4079] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.441275][ T4079] bridge_slave_0: entered allmulticast mode [ 36.454156][ T4079] bridge_slave_0: entered promiscuous mode [ 36.468283][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.475692][ T4079] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.491316][ T4079] bridge_slave_1: entered allmulticast mode [ 36.497980][ T4079] bridge_slave_1: entered promiscuous mode [ 36.537612][ T3552] hsr_slave_0: left promiscuous mode [ 36.546520][ T3552] hsr_slave_1: left promiscuous mode [ 36.558619][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.566188][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.593533][ T4129] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 36.605266][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.612829][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.644870][ T3552] veth1_macvtap: left promiscuous mode [ 36.671918][ T3552] veth0_macvtap: left promiscuous mode [ 36.677483][ T3552] veth1_vlan: left promiscuous mode [ 36.702141][ T3552] veth0_vlan: left promiscuous mode [ 36.838194][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 36.853675][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 36.905390][ T4146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4146 comm=syz.0.189 [ 36.917955][ T4146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4146 comm=syz.0.189 [ 36.937121][ T4079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.970842][ T4079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.004056][ T4123] bridge0: entered promiscuous mode [ 37.009440][ T4123] macvtap1: entered allmulticast mode [ 37.014913][ T4123] bridge0: entered allmulticast mode [ 37.039927][ T4123] bridge0: port 3(macvtap1) entered blocking state [ 37.046550][ T4123] bridge0: port 3(macvtap1) entered disabled state [ 37.067718][ T4123] bridge0: left allmulticast mode [ 37.072920][ T4123] bridge0: left promiscuous mode [ 37.107308][ T4079] team0: Port device team_slave_0 added [ 37.140661][ T4079] team0: Port device team_slave_1 added [ 37.162700][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 37.162727][ T29] audit: type=1400 audit(1755730937.058:552): avc: denied { listen } for pid=4173 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.227833][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.234872][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.242694][ T29] audit: type=1400 audit(1755730937.128:553): avc: denied { block_suspend } for pid=4171 comm="syz.4.194" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.260955][ T4079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.287486][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.299907][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.325977][ T4079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.380285][ T29] audit: type=1326 audit(1755730937.268:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.403893][ T29] audit: type=1326 audit(1755730937.268:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.427312][ T29] audit: type=1326 audit(1755730937.268:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.450747][ T29] audit: type=1326 audit(1755730937.268:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.474209][ T29] audit: type=1326 audit(1755730937.268:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.497568][ T29] audit: type=1326 audit(1755730937.268:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.520904][ T29] audit: type=1326 audit(1755730937.268:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.544309][ T29] audit: type=1326 audit(1755730937.268:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 37.577515][ T4186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.610706][ T4195] netlink: 'syz.4.200': attribute type 4 has an invalid length. [ 37.612355][ T4189] vlan2: entered allmulticast mode [ 37.623744][ T4189] bond1: entered allmulticast mode [ 37.638727][ T4079] hsr_slave_0: entered promiscuous mode [ 37.646617][ T4079] hsr_slave_1: entered promiscuous mode [ 37.764110][ T3513] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.784098][ T3513] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.801024][ T3513] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.844361][ T3513] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.912075][ T4079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.925286][ T4079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.943807][ T4079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.962596][ T4079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.088369][ T4079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.145866][ T4079] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.172276][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.179380][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.190065][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.197190][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.296759][ T4079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.338272][ T4274] loop2: detected capacity change from 0 to 1024 [ 38.355147][ T4274] EXT4-fs: Ignoring removed orlov option [ 38.364048][ T3521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.394696][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.416392][ T3521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.465727][ T3521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.519357][ T3521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.547280][ T4079] veth0_vlan: entered promiscuous mode [ 38.556175][ T4079] veth1_vlan: entered promiscuous mode [ 38.587576][ T4079] veth0_macvtap: entered promiscuous mode [ 38.602795][ T3521] bridge_slave_1: left allmulticast mode [ 38.608493][ T3521] bridge_slave_1: left promiscuous mode [ 38.614234][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.623299][ T3521] bridge_slave_0: left allmulticast mode [ 38.628994][ T3521] bridge_slave_0: left promiscuous mode [ 38.634920][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.772988][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.783481][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.793632][ T3521] bond0 (unregistering): Released all slaves [ 38.807088][ T4079] veth1_macvtap: entered promiscuous mode [ 38.836883][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.848523][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.868540][ T3521] tipc: Left network mode [ 38.870854][ T4291] lo speed is unknown, defaulting to 1000 [ 38.873249][ T3520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.907733][ T3520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.928158][ T3520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945566][ T3568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.997419][ T4310] loop4: detected capacity change from 0 to 128 [ 39.073692][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.081355][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.105916][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.113389][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.154741][ T3521] veth1_macvtap: left promiscuous mode [ 39.160296][ T3521] veth0_macvtap: left promiscuous mode [ 39.176127][ T3521] veth1_vlan: left promiscuous mode [ 39.191629][ T3521] veth0_vlan: left promiscuous mode [ 39.407875][ T4310] $H: renamed from bond0 (while UP) [ 39.427413][ T4330] loop1: detected capacity change from 0 to 128 [ 39.438907][ T4310] $H: entered promiscuous mode [ 39.444233][ T4310] bond_slave_0: entered promiscuous mode [ 39.450113][ T4310] bond_slave_1: entered promiscuous mode [ 39.467979][ T4330] FAT-fs (loop1): Directory bread(block 32) failed [ 39.475466][ T4330] FAT-fs (loop1): Directory bread(block 33) failed [ 39.485230][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.504103][ T4330] FAT-fs (loop1): Directory bread(block 34) failed [ 39.510912][ T4330] FAT-fs (loop1): Directory bread(block 35) failed [ 39.531252][ T4330] FAT-fs (loop1): Directory bread(block 36) failed [ 39.546180][ T4337] vhci_hcd: invalid port number 96 [ 39.551383][ T4337] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.562098][ T4330] FAT-fs (loop1): Directory bread(block 37) failed [ 39.586365][ T4330] FAT-fs (loop1): Directory bread(block 38) failed [ 39.614718][ T4330] FAT-fs (loop1): Directory bread(block 39) failed [ 39.621500][ T4330] FAT-fs (loop1): Directory bread(block 40) failed [ 39.628270][ T4330] FAT-fs (loop1): Directory bread(block 41) failed [ 39.648844][ T4291] chnl_net:caif_netlink_parms(): no params data found [ 39.790759][ T4370] tipc: Started in network mode [ 39.795727][ T4370] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 39.826178][ T4370] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 39.834555][ T4370] tipc: Enabled bearer , priority 10 [ 39.842867][ T4382] __nla_validate_parse: 5 callbacks suppressed [ 39.842880][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 39.852196][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 39.857889][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 39.922049][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.929159][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.949541][ T4291] bridge_slave_0: entered allmulticast mode [ 39.957396][ T4291] bridge_slave_0: entered promiscuous mode [ 39.973651][ T4385] syz.5.227 uses obsolete (PF_INET,SOCK_PACKET) [ 39.999741][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.006961][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.015283][ T4291] bridge_slave_1: entered allmulticast mode [ 40.022254][ T4291] bridge_slave_1: entered promiscuous mode [ 40.061533][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.072914][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.102816][ T4291] team0: Port device team_slave_0 added [ 40.109762][ T4291] team0: Port device team_slave_1 added [ 40.162036][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.169021][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.195017][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.217609][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.224638][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.250682][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.358601][ T4291] hsr_slave_0: entered promiscuous mode [ 40.369496][ T4421] loop4: detected capacity change from 0 to 2364 [ 40.376280][ T4291] hsr_slave_1: entered promiscuous mode [ 40.388604][ T4291] debugfs: 'hsr0' already exists in 'hsr' [ 40.391030][ T4421] ======================================================= [ 40.391030][ T4421] WARNING: The mand mount option has been deprecated and [ 40.391030][ T4421] and is ignored by this kernel. Remove the mand [ 40.391030][ T4421] option from the mount to silence this warning. [ 40.391030][ T4421] ======================================================= [ 40.394422][ T4291] Cannot create hsr debugfs directory [ 40.586629][ T4291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 40.600514][ T4291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 40.634425][ T4291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 40.667275][ T4291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 40.765797][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.786538][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.806801][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.813905][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.826536][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.833669][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.942932][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.951316][ T10] tipc: Node number set to 1 [ 41.212444][ T4509] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.251'. [ 41.260217][ T4517] lo speed is unknown, defaulting to 1000 [ 41.262305][ T4291] veth0_vlan: entered promiscuous mode [ 41.274360][ T4515] loop2: detected capacity change from 0 to 2048 [ 41.289455][ T4291] veth1_vlan: entered promiscuous mode [ 41.296554][ T4515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.302890][ T4291] veth0_macvtap: entered promiscuous mode [ 41.316085][ T4291] veth1_macvtap: entered promiscuous mode [ 41.350296][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.360935][ T4522] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.372447][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.397770][ T3529] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.408790][ T3529] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.427134][ T3529] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.468128][ T3529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.504730][ T4528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.550996][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.584432][ T4528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.623809][ T4528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.673238][ T4528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.737462][ T3521] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748825][ T3521] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.760436][ T3552] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.770918][ T3552] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.023659][ T4552] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 42.037816][ T4552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.064121][ T4552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.071718][ T4552] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 42.085980][ T4552] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 42.185810][ T4561] loop4: detected capacity change from 0 to 1024 [ 42.199531][ T4561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.350946][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 42.399022][ T4569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.468774][ T4569] vlan2: entered allmulticast mode [ 42.474060][ T4569] bond1: entered allmulticast mode [ 42.498338][ T4572] bridge0: entered promiscuous mode [ 42.506826][ T4572] bridge0: port 3(macsec1) entered blocking state [ 42.513536][ T4572] bridge0: port 3(macsec1) entered disabled state [ 42.520260][ T4572] macsec1: entered allmulticast mode [ 42.525605][ T4572] bridge0: entered allmulticast mode [ 42.532076][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.543983][ T4572] macsec1: left allmulticast mode [ 42.549062][ T4572] bridge0: left allmulticast mode [ 42.571102][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 42.571120][ T29] audit: type=1326 audit(1755730942.458:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 42.603082][ T4572] bridge0: left promiscuous mode [ 42.624634][ T29] audit: type=1326 audit(1755730942.498:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 42.648143][ T29] audit: type=1326 audit(1755730942.498:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 42.671440][ T29] audit: type=1326 audit(1755730942.498:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 42.694793][ T29] audit: type=1326 audit(1755730942.498:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78739ebe9 code=0x7ffc0000 [ 42.784726][ T29] audit: type=1400 audit(1755730942.678:770): avc: denied { create } for pid=4582 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.850860][ T29] audit: type=1400 audit(1755730942.698:771): avc: denied { setopt } for pid=4582 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.870194][ T29] audit: type=1400 audit(1755730942.698:772): avc: denied { connect } for pid=4582 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.894405][ T29] audit: type=1400 audit(1755730942.698:773): avc: denied { ioctl } for pid=4582 comm="syz.1.272" path="socket:[9126]" dev="sockfs" ino=9126 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.929086][ T4594] loop4: detected capacity change from 0 to 1024 [ 42.952718][ T4596] bridge_slave_1: left allmulticast mode [ 42.958585][ T4596] bridge_slave_1: left promiscuous mode [ 42.964456][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.971919][ T29] audit: type=1400 audit(1755730942.848:774): avc: denied { write } for pid=4595 comm="syz.2.277" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 43.005510][ T4596] bridge_slave_0: left allmulticast mode [ 43.011269][ T4596] bridge_slave_0: left promiscuous mode [ 43.017224][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.051839][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.236286][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.938240][ T4619] hub 9-0:1.0: USB hub found [ 43.951293][ T4619] hub 9-0:1.0: 8 ports detected [ 43.984296][ T4619] loop5: detected capacity change from 0 to 512 [ 44.038532][ T4619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.152888][ T4619] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.283: Bad quota inum: 29696, type: 1 [ 44.192393][ T4619] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 44.252758][ T4619] EXT4-fs (loop5): mount failed [ 44.271057][ T4624] loop6: detected capacity change from 0 to 2048 [ 44.351529][ T4624] EXT4-fs: dax option not supported [ 44.478565][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 44.487586][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 44.516155][ T4631] bridge0: port 3(vlan0) entered blocking state [ 44.522647][ T4631] bridge0: port 3(vlan0) entered disabled state [ 44.529838][ T4631] vlan0: entered allmulticast mode [ 44.536036][ T4631] vlan0: left allmulticast mode [ 44.557858][ T4638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.624181][ T4638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.684147][ T4647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 44.698239][ T4649] loop4: detected capacity change from 0 to 512 [ 44.740647][ T4638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.756637][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.778449][ T4654] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 44.786271][ T4654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.295'. [ 44.804791][ T4649] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.815980][ T4654] dummy0: entered promiscuous mode [ 44.832129][ T4654] net_ratelimit: 2 callbacks suppressed [ 44.832145][ T4654] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 44.887257][ T4638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.911007][ T4649] mmap: syz.4.294 (4649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.969316][ T3552] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.006946][ T3552] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.015946][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.037839][ T3552] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.043750][ T4659] loop2: detected capacity change from 0 to 2048 [ 45.058313][ T3552] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.103766][ T4665] loop4: detected capacity change from 0 to 1024 [ 45.105987][ T3287] loop2: p2 p3 p7 [ 45.144967][ T4665] EXT4-fs: Ignoring removed orlov option [ 45.161330][ T4669] loop1: detected capacity change from 0 to 512 [ 45.173385][ T4659] loop2: p2 p3 p7 [ 45.180200][ T4665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.224448][ T2991] loop2: p2 p3 p7 [ 45.267709][ T4669] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 45.364893][ T4669] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 45.401267][ T4669] EXT4-fs (loop1): 1 truncate cleaned up [ 45.417543][ T4669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.487725][ T4679] netlink: 256 bytes leftover after parsing attributes in process `syz.5.304'. [ 45.501875][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 45.514647][ T4104] udevd[4104]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.526051][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 45.536711][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.549445][ T4681] netlink: 256 bytes leftover after parsing attributes in process `syz.6.305'. [ 45.588041][ T4104] udevd[4104]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.602798][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 45.614950][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 45.615676][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.686912][ T4104] udevd[4104]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.687083][ T4690] udevd[4690]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 45.727894][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 45.894766][ T4712] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.966550][ T4718] loop5: detected capacity change from 0 to 256 [ 45.999923][ T4712] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.073064][ T4712] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.116883][ T4723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.134033][ T4712] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.193850][ T3521] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.212212][ T4732] lo speed is unknown, defaulting to 1000 [ 46.221230][ T3552] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.229459][ T3552] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.253518][ T4732] lo speed is unknown, defaulting to 1000 [ 46.259821][ T4732] lo speed is unknown, defaulting to 1000 [ 46.265926][ T3552] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.316598][ T4732] infiniband syz2: set active [ 46.321408][ T4732] infiniband syz2: added lo [ 46.325939][ T36] lo speed is unknown, defaulting to 1000 [ 46.346432][ T4732] RDS/IB: syz2: added [ 46.350504][ T4732] smc: adding ib device syz2 with port count 1 [ 46.356766][ T4732] smc: ib device syz2 port 1 has pnetid [ 46.362723][ T36] lo speed is unknown, defaulting to 1000 [ 46.368816][ T4732] lo speed is unknown, defaulting to 1000 [ 46.404060][ T4732] lo speed is unknown, defaulting to 1000 [ 46.438880][ T4732] lo speed is unknown, defaulting to 1000 [ 46.654234][ T4732] lo speed is unknown, defaulting to 1000 [ 46.730060][ T4732] lo speed is unknown, defaulting to 1000 [ 46.794029][ T4740] 9pnet_fd: Insufficient options for proto=fd [ 46.863085][ T4742] bridge0: port 3(bond0) entered blocking state [ 46.869400][ T4742] bridge0: port 3(bond0) entered disabled state [ 46.889122][ T4742] bond0: entered allmulticast mode [ 46.894436][ T4742] bond_slave_0: entered allmulticast mode [ 46.900213][ T4742] bond_slave_1: entered allmulticast mode [ 46.927826][ T4742] bond0: entered promiscuous mode [ 46.932990][ T4742] bond_slave_0: entered promiscuous mode [ 46.938790][ T4742] bond_slave_1: entered promiscuous mode [ 46.977500][ T4742] bridge0: port 3(bond0) entered blocking state [ 46.983890][ T4742] bridge0: port 3(bond0) entered forwarding state [ 47.000378][ T4740] lo speed is unknown, defaulting to 1000 [ 47.032954][ T4744] random: crng reseeded on system resumption [ 47.043223][ T4749] bond0: left allmulticast mode [ 47.048202][ T4749] bond_slave_0: left allmulticast mode [ 47.053729][ T4749] bond_slave_1: left allmulticast mode [ 47.059264][ T4749] bond0: left promiscuous mode [ 47.064235][ T4749] bond_slave_0: left promiscuous mode [ 47.070013][ T4749] bond_slave_1: left promiscuous mode [ 47.075713][ T4749] bridge0: port 3(bond0) entered disabled state [ 47.205789][ T4740] lo speed is unknown, defaulting to 1000 [ 47.255270][ T4752] loop5: detected capacity change from 0 to 512 [ 47.281729][ T4754] loop2: detected capacity change from 0 to 2048 [ 47.294407][ T4752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.310381][ T4754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.319502][ T4752] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.326: Failed to acquire dquot type 0 [ 47.348014][ T4764] netlink: 3 bytes leftover after parsing attributes in process `syz.1.330'. [ 47.364401][ T4765] netlink: 156 bytes leftover after parsing attributes in process `syz.6.329'. [ 47.410637][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 47.421245][ T4764] 0X: renamed from caif0 [ 47.429097][ T4764] 0X: entered allmulticast mode [ 47.434377][ T4764] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 47.457812][ T4079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.489801][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.539695][ T4770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 47.637496][ T4772] ip6_vti0: mtu greater than device maximum [ 47.654879][ T4770] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4770 comm=syz.1.333 [ 47.726278][ T4777] tipc: Enabled bearer , priority 0 [ 47.755396][ T4777] tipc: Disabling bearer [ 47.784496][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 47.784512][ T29] audit: type=1326 audit(47.760:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1091395ba7 code=0x7ffc0000 [ 47.813229][ T29] audit: type=1326 audit(47.760:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f109133add9 code=0x7ffc0000 [ 47.835776][ T29] audit: type=1326 audit(47.760:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1091395ba7 code=0x7ffc0000 [ 47.858248][ T29] audit: type=1326 audit(47.760:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f109133add9 code=0x7ffc0000 [ 47.880833][ T29] audit: type=1326 audit(47.760:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 47.903711][ T29] audit: type=1326 audit(47.760:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 48.010537][ T4785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4785 comm=syz.2.340 [ 48.111274][ T29] audit: type=1326 audit(47.760:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 48.133996][ T29] audit: type=1326 audit(47.760:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 48.156639][ T29] audit: type=1326 audit(47.760:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 48.179368][ T29] audit: type=1326 audit(47.800:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f109139ebe9 code=0x7ffc0000 [ 48.205155][ T4791] loop1: detected capacity change from 0 to 1024 [ 48.212418][ T4791] EXT4-fs: Ignoring removed orlov option [ 48.269524][ T4791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.338841][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 48.360542][ T4796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.484198][ T4802] lo speed is unknown, defaulting to 1000 [ 48.490405][ T4802] lo speed is unknown, defaulting to 1000 [ 48.516874][ T4796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.609953][ T4796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.748679][ T4808] ip6_vti0: mtu greater than device maximum [ 48.803506][ T4796] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.070062][ T3519] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.216092][ T3519] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.228083][ T3519] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.369630][ T3558] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.599050][ T4826] tipc: Enabling of bearer rejected, failed to enable media [ 50.126177][ T4834] bridge: RTM_NEWNEIGH with invalid ether address [ 50.150342][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.201846][ T4843] loop6: detected capacity change from 0 to 128 [ 50.216098][ T4846] netlink: 180 bytes leftover after parsing attributes in process `syz.1.358'. [ 50.229201][ T4846] netlink: 180 bytes leftover after parsing attributes in process `syz.1.358'. [ 50.249399][ T4843] FAT-fs (loop6): Directory bread(block 32) failed [ 50.301191][ T4843] FAT-fs (loop6): Directory bread(block 33) failed [ 50.313277][ T4843] FAT-fs (loop6): Directory bread(block 34) failed [ 50.332020][ T4843] FAT-fs (loop6): Directory bread(block 35) failed [ 50.344179][ T4843] FAT-fs (loop6): Directory bread(block 36) failed [ 50.362669][ T4843] FAT-fs (loop6): Directory bread(block 37) failed [ 50.369342][ T4843] FAT-fs (loop6): Directory bread(block 38) failed [ 50.377014][ T4843] FAT-fs (loop6): Directory bread(block 39) failed [ 50.402282][ T4843] FAT-fs (loop6): Directory bread(block 40) failed [ 50.408974][ T4843] FAT-fs (loop6): Directory bread(block 41) failed [ 50.497749][ T4854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.360'. [ 50.527785][ T4854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4854 comm=syz.5.360 [ 50.914829][ T4873] loop6: detected capacity change from 0 to 1024 [ 50.932510][ T4873] EXT4-fs: Ignoring removed orlov option [ 50.951038][ T4873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.693575][ T4873] ================================================================== [ 51.701718][ T4873] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 51.709743][ T4873] [ 51.712084][ T4873] write to 0xffff888106e6254c of 4 bytes by task 4879 on cpu 1: [ 51.719714][ T4873] xas_set_mark+0x12b/0x140 [ 51.724232][ T4873] __folio_start_writeback+0x1dd/0x440 [ 51.729705][ T4873] ext4_bio_write_folio+0x5ad/0x9f0 [ 51.734914][ T4873] mpage_process_page_bufs+0x4a1/0x620 [ 51.740373][ T4873] mpage_prepare_extent_to_map+0x786/0xc00 [ 51.746180][ T4873] ext4_do_writepages+0xa05/0x2750 [ 51.751322][ T4873] ext4_writepages+0x176/0x300 [ 51.756086][ T4873] do_writepages+0x1c3/0x310 [ 51.760677][ T4873] file_write_and_wait_range+0x156/0x2c0 [ 51.766320][ T4873] generic_buffers_fsync_noflush+0x45/0x120 [ 51.772242][ T4873] ext4_sync_file+0x1ab/0x690 [ 51.776928][ T4873] vfs_fsync_range+0x10d/0x130 [ 51.781692][ T4873] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.787248][ T4873] ext4_file_write_iter+0x383/0xf00 [ 51.792540][ T4873] iter_file_splice_write+0x663/0xa60 [ 51.797910][ T4873] direct_splice_actor+0x153/0x2a0 [ 51.803057][ T4873] splice_direct_to_actor+0x30f/0x680 [ 51.808430][ T4873] do_splice_direct+0xda/0x150 [ 51.813195][ T4873] do_sendfile+0x380/0x650 [ 51.817621][ T4873] __x64_sys_sendfile64+0x105/0x150 [ 51.822822][ T4873] x64_sys_call+0x2bb0/0x2ff0 [ 51.827503][ T4873] do_syscall_64+0xd2/0x200 [ 51.832019][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.838000][ T4873] [ 51.840317][ T4873] read to 0xffff888106e6254c of 4 bytes by task 4873 on cpu 0: [ 51.847867][ T4873] file_write_and_wait_range+0x10e/0x2c0 [ 51.853526][ T4873] generic_buffers_fsync_noflush+0x45/0x120 [ 51.859445][ T4873] ext4_sync_file+0x1ab/0x690 [ 51.864304][ T4873] vfs_fsync_range+0x10d/0x130 [ 51.869082][ T4873] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.874645][ T4873] ext4_file_write_iter+0x383/0xf00 [ 51.879969][ T4873] iter_file_splice_write+0x663/0xa60 [ 51.885346][ T4873] direct_splice_actor+0x153/0x2a0 [ 51.890460][ T4873] splice_direct_to_actor+0x30f/0x680 [ 51.895833][ T4873] do_splice_direct+0xda/0x150 [ 51.900596][ T4873] do_sendfile+0x380/0x650 [ 51.905025][ T4873] __x64_sys_sendfile64+0x105/0x150 [ 51.910227][ T4873] x64_sys_call+0x2bb0/0x2ff0 [ 51.914906][ T4873] do_syscall_64+0xd2/0x200 [ 51.919416][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.925319][ T4873] [ 51.927654][ T4873] value changed: 0x0a000021 -> 0x04000021 [ 51.933378][ T4873] [ 51.935700][ T4873] Reported by Kernel Concurrency Sanitizer on: [ 51.941853][ T4873] CPU: 0 UID: 0 PID: 4873 Comm: syz.6.367 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.953140][ T4873] Tainted: [W]=WARN [ 51.956939][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.967167][ T4873] ================================================================== [ 52.162850][ T4291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.