last executing test programs: 2.564892521s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 1.958663123s ago: executing program 3 (id=84): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x9) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.931897985s ago: executing program 3 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000140), &(0x7f00000004c0)=@tcp=r4}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 1.918381866s ago: executing program 3 (id=86): socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.888711468s ago: executing program 3 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.86852319s ago: executing program 3 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.771616938s ago: executing program 3 (id=91): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x1, {0x1, 0xff}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.250479113s ago: executing program 0 (id=93): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000008000000ffdfaa3791c0389aec251f8d7bc4f21709c00a5820d00354deb0e6f23bd7aea97e685b2531018d3789f6bd2efaf3894149c78edd56"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0xfffffffffffffc51, 0x2000c801, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8310fc1bf01e2fad, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 1.249910463s ago: executing program 2 (id=94): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.236434684s ago: executing program 0 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 1.17006368s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) shutdown(r2, 0x1) 1.085375967s ago: executing program 4 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="42050105"], 0x4) 1.04933841s ago: executing program 2 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x1000000201005) 1.04783777s ago: executing program 0 (id=105): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x6c}, 0xa, @in6=@mcast1, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 915.559662ms ago: executing program 2 (id=107): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x30) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 898.469253ms ago: executing program 0 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x26fd, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x2, 0x40}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 679.243092ms ago: executing program 1 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x164e077801a2caba, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0xd81c, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000240010"], 0xb8}}, 0x0) 210.537162ms ago: executing program 4 (id=113): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xaf2, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/130, 0x82}], 0x2, &(0x7f0000000340)=""/3, 0x3}, 0x1) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x8, 0x1, 0xf5, 0x0, 0x2, 0x800, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xe7, 0x3}, 0x80, 0xffffffff7fffffff, 0x7, 0x3, 0x89, 0x54, 0x2, 0x0, 0x2, 0x0, 0x9}, r1, 0xb, r0, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff8d0100"}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) close(0x4) 190.176184ms ago: executing program 1 (id=114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x160, 0xa8, 0xfeffffff, 0x208, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'macvlan1\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @local, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'macvtap0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 163.360916ms ago: executing program 1 (id=115): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f000001a2c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x14, 0x4, 0x37, 0x0, 0x8001, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x2, @perf_config_ext={0x6, 0x4}, 0x4001, 0xe1, 0x80000000, 0x7, 0x4, 0xb96, 0x10, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0x5, r2, 0x1) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2284, &(0x7f0000000000)) 157.925106ms ago: executing program 4 (id=116): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close(r1) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 140.897568ms ago: executing program 4 (id=117): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) listen(r2, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) 127.731519ms ago: executing program 1 (id=118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 123.468299ms ago: executing program 4 (id=119): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x48) sendto$packet(r0, &(0x7f0000000c00)="c059a409731addd79c1054d891421b47e97697dd56b6154cb54bf8799773c3a8f537d94ba997f0ec54b9793f8c599f10e08b30116419799bc1555fcf3a66009f283cf675aba5ca6028b717c97867f2e6b533f51e06078349dd0a8224c1298fcb1c7fe985212e07bce4b98d79b2accb467734e39ce50b9e988692704be0a161ce5c58be4cc11b71d68febd241aaad82d3bbba706a3b6dc76d9a0bbea0e96ea9e184b42cc97565973e060a4e2930481ec2924693aa76425e49e19fa4d3ba056b03ee01779fed33b98e56eae784543bb3042fb55d8bcb2440082f393e925796c88603c25a8d3a71b7dd1a5906590067f589fed53145f57a526467331cf7716f69e22d7b65217be81cca9b58d32ad9deb01f1fb375521b77cd1d016b0e8b15948eeb7f37509f84f40857e432932eb175395d28eea51698cc8ddb61c4c22c86d544aca9b95f14d10f7eaa643274b8ff1e89dffd0b0dbe8f2e9f3d913937c72d2677ef838b2d3f171cc41f41277c3b8be5a0789f4a7d4abc2122ef0d741615e04d536433a9064165e9809ddb009b3e6ee15c565f46f06e4bb97a1a28f1da03464b5681df41e8390ce6c91bd7bf7a288b42c0ff87273b72ebe1c87a2a200559589fbf26e83dcb60e46cb00d06adf9e9f5de0613fd0bebb6434b6d230ad7273bdea832ac8020ded9011584f75928da5356a69ad143be201e25242395b464d77a9c54b913cf67e21e40d9fa38fb5d8978601d7479e6d9955b9f1a046bc6260ac7455eac0a6fbd5884d7b8f68050116588b79515a56c754370fc0c5f7b0844589cb0c33bdbc33a955b986fbca30e0cb6f4e38d55bc2d8f7b2d69ec2bbeb84a6dcd6253824938a11480d96d063c4ee511c809486e60651a6983f52d69796a39a013ae4f8e96b0789627e1ac0d77a887b4a36e805d34f064bb6a5adf8541f23bd0d5a46e80859256bc9b141619a2d140bb526a38310cb5d55fef419030a6265ae33c511a0ddd7e70ac5da1f39dac33b799b80523e5375bcbdab06c8304369f77f8da8b56ad636bbb57acd2b521fc0fdc18d1e8617ced66f08a1a46c8831e0218c9c4c2ff881f8570879683bc6229a0038d08c2bb174c59631259609f23dbd79f31437dcb20627b5e78828f58a85a56adab5f03f962dcbfcd4923a817c125ba8fa4bc1e7f1b1867c6037de1b4e97ad40e9d5804a54d3ab1f4808ad5ebd323d72a0327644c70823892b1f61586b7c7168c7446ab1373a1fcaef430f8a68a07a75c70275d9834ed98b5b9ee78fd844eabfe685189e8acb685568f2ef36f886e3b6ab33a79b22d07ed4f798d79d98ae97367f4cff32d4e7d909f144bcab353aadc0907e979e227b498e214760b06af71cea2956e21f292ac28fbbb697ec3e2ab214acd7a05598719e1610c3f9aed20df373bb566bbe8ad0daa5c2aa3664ccf4aeee9e05e1d3fe35c2e4e2a970010e45add7d40540682fe0f46c1e373774c378d4aa65de5a781e1ff8a25c4f6c510ac2988d189262284df1e6d6614bbcdfc7cb3327ee98a0835a5e2fd", 0x441, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 56.178975ms ago: executing program 1 (id=120): syz_io_uring_setup(0xe3e, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x4}, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 45.248516ms ago: executing program 2 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 35.119937ms ago: executing program 1 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x7ab1, &(0x7f0000000300)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) 20.772678ms ago: executing program 4 (id=123): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) clock_getres(0xc6db75abd9de7fb3, 0x0) 20.010658ms ago: executing program 0 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) r1 = syz_io_uring_setup(0x24f7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=125): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): [ 17.667458][ T29] audit: type=1400 audit(1728942575.102:81): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 21.946340][ T29] audit: type=1400 audit(1728942579.382:82): avc: denied { mounton } for pid=3255 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.947357][ T3255] cgroup: Unknown subsys name 'net' [ 21.969248][ T29] audit: type=1400 audit(1728942579.382:83): avc: denied { mount } for pid=3255 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.996580][ T29] audit: type=1400 audit(1728942579.412:84): avc: denied { unmount } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.134665][ T3255] cgroup: Unknown subsys name 'cpuset' [ 22.140735][ T3255] cgroup: Unknown subsys name 'rlimit' [ 22.228310][ T29] audit: type=1400 audit(1728942579.662:85): avc: denied { setattr } for pid=3255 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.251588][ T29] audit: type=1400 audit(1728942579.662:86): avc: denied { create } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.272191][ T29] audit: type=1400 audit(1728942579.662:87): avc: denied { write } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.279547][ T3257] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.292652][ T29] audit: type=1400 audit(1728942579.662:88): avc: denied { read } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.321466][ T29] audit: type=1400 audit(1728942579.662:89): avc: denied { mounton } for pid=3255 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.346379][ T29] audit: type=1400 audit(1728942579.662:90): avc: denied { mount } for pid=3255 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.369632][ T29] audit: type=1400 audit(1728942579.742:91): avc: denied { relabelto } for pid=3257 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.398588][ T3255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.372127][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 23.431602][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.438751][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.445850][ T3264] bridge_slave_0: entered allmulticast mode [ 23.452119][ T3264] bridge_slave_0: entered promiscuous mode [ 23.468424][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.475618][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.482794][ T3264] bridge_slave_1: entered allmulticast mode [ 23.489171][ T3264] bridge_slave_1: entered promiscuous mode [ 23.538295][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.550665][ T3274] chnl_net:caif_netlink_parms(): no params data found [ 23.580812][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 23.590669][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.631502][ T3264] team0: Port device team_slave_0 added [ 23.637551][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 23.655465][ T3264] team0: Port device team_slave_1 added [ 23.685469][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.692581][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.699789][ T3274] bridge_slave_0: entered allmulticast mode [ 23.706038][ T3274] bridge_slave_0: entered promiscuous mode [ 23.712311][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 23.725534][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.732475][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.758419][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.782932][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.790043][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.797345][ T3274] bridge_slave_1: entered allmulticast mode [ 23.803628][ T3274] bridge_slave_1: entered promiscuous mode [ 23.816568][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.823583][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.849585][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.876871][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.883982][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.891104][ T3265] bridge_slave_0: entered allmulticast mode [ 23.897525][ T3265] bridge_slave_0: entered promiscuous mode [ 23.904086][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.911132][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.918485][ T3265] bridge_slave_1: entered allmulticast mode [ 23.924902][ T3265] bridge_slave_1: entered promiscuous mode [ 23.936573][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.943752][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.951303][ T3269] bridge_slave_0: entered allmulticast mode [ 23.957747][ T3269] bridge_slave_0: entered promiscuous mode [ 23.968586][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.978753][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.995162][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002355][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.009497][ T3269] bridge_slave_1: entered allmulticast mode [ 24.015836][ T3269] bridge_slave_1: entered promiscuous mode [ 24.034724][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.059502][ T3264] hsr_slave_0: entered promiscuous mode [ 24.065556][ T3264] hsr_slave_1: entered promiscuous mode [ 24.072199][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.093379][ T3274] team0: Port device team_slave_0 added [ 24.099908][ T3274] team0: Port device team_slave_1 added [ 24.114170][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.123339][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.130433][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.137580][ T3273] bridge_slave_0: entered allmulticast mode [ 24.144207][ T3273] bridge_slave_0: entered promiscuous mode [ 24.159150][ T3265] team0: Port device team_slave_0 added [ 24.165708][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.174928][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.182126][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.189364][ T3273] bridge_slave_1: entered allmulticast mode [ 24.195640][ T3273] bridge_slave_1: entered promiscuous mode [ 24.215550][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.222520][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.248496][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.264113][ T3265] team0: Port device team_slave_1 added [ 24.274144][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.283586][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.290745][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.316852][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.340613][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.356799][ T3269] team0: Port device team_slave_0 added [ 24.366584][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.373611][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.399721][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.423103][ T3269] team0: Port device team_slave_1 added [ 24.429415][ T3273] team0: Port device team_slave_0 added [ 24.435908][ T3273] team0: Port device team_slave_1 added [ 24.441711][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.448805][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.474711][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.512003][ T3274] hsr_slave_0: entered promiscuous mode [ 24.518125][ T3274] hsr_slave_1: entered promiscuous mode [ 24.524113][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.531653][ T3274] Cannot create hsr debugfs directory [ 24.542436][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.549428][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.575415][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.592500][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.599587][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.625666][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.637774][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.644764][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.670746][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.681739][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.688701][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.714592][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.742286][ T3265] hsr_slave_0: entered promiscuous mode [ 24.748287][ T3265] hsr_slave_1: entered promiscuous mode [ 24.754300][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.761843][ T3265] Cannot create hsr debugfs directory [ 24.804549][ T3273] hsr_slave_0: entered promiscuous mode [ 24.810647][ T3273] hsr_slave_1: entered promiscuous mode [ 24.816691][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.824297][ T3273] Cannot create hsr debugfs directory [ 24.849111][ T3269] hsr_slave_0: entered promiscuous mode [ 24.855368][ T3269] hsr_slave_1: entered promiscuous mode [ 24.861208][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.868816][ T3269] Cannot create hsr debugfs directory [ 24.922727][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.932766][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.951616][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.962138][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.035733][ T3274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.046777][ T3274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.063627][ T3274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.072808][ T3274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.088974][ T3269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.101528][ T3269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.110287][ T3269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.125347][ T3269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.167783][ T3265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.176187][ T3265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.184625][ T3265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.199654][ T3265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.211504][ T3273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.220877][ T3273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.240653][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.247722][ T3273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.261110][ T3273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.280532][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.289038][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.301902][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.313110][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.320179][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.331666][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.351299][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.358497][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.367379][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.374435][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.386584][ T3274] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.397612][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.404734][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.420033][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.427097][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.456152][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.463460][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.476448][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.511954][ T3274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.522364][ T3274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.553026][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.565869][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.597183][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.610389][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.620571][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.634672][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.641883][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.654033][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.661127][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.675280][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.682422][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.691419][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.698474][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.709498][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.724916][ T3273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.735333][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.762024][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.845180][ T3264] veth0_vlan: entered promiscuous mode [ 25.857548][ T3264] veth1_vlan: entered promiscuous mode [ 25.892970][ T3274] veth0_vlan: entered promiscuous mode [ 25.908814][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.917704][ T3264] veth0_macvtap: entered promiscuous mode [ 25.931672][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.940876][ T3274] veth1_vlan: entered promiscuous mode [ 25.949397][ T3269] veth0_vlan: entered promiscuous mode [ 25.957739][ T3264] veth1_macvtap: entered promiscuous mode [ 25.974709][ T3269] veth1_vlan: entered promiscuous mode [ 25.983500][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.007703][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.018558][ T3269] veth0_macvtap: entered promiscuous mode [ 26.029240][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.038067][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.047013][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.055984][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.067225][ T3269] veth1_macvtap: entered promiscuous mode [ 26.083117][ T3274] veth0_macvtap: entered promiscuous mode [ 26.101881][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.112563][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.123365][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.136881][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.147343][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.159043][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.170376][ T3274] veth1_macvtap: entered promiscuous mode [ 26.181398][ T3269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.190254][ T3269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.199094][ T3269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.207833][ T3269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.227799][ T3265] veth0_vlan: entered promiscuous mode [ 26.237390][ T3264] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.250961][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.262358][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.272370][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.282815][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.293316][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.313533][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.324081][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.333945][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.344387][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.357355][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.365355][ T3265] veth1_vlan: entered promiscuous mode [ 26.392479][ T3265] veth0_macvtap: entered promiscuous mode [ 26.404931][ T3265] veth1_macvtap: entered promiscuous mode [ 26.415703][ T3273] veth0_vlan: entered promiscuous mode [ 26.422268][ T3274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.431030][ T3274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.439790][ T3274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.448545][ T3274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.464711][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.475243][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.485235][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.495854][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.505724][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.516260][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.530271][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.545450][ T3273] veth1_vlan: entered promiscuous mode [ 26.545890][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 26.561523][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.572246][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.582157][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.592593][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.602507][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.612990][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.633544][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.677320][ T3265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.686088][ T3265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.694844][ T3265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.703569][ T3265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.707930][ T3412] loop0: detected capacity change from 0 to 8192 [ 26.740645][ T3273] veth0_macvtap: entered promiscuous mode [ 26.757537][ T3273] veth1_macvtap: entered promiscuous mode [ 26.770405][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.780980][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.791478][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.802012][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.811858][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.822426][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.832335][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.842761][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.855723][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.863970][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.874483][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.884404][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.894845][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.904765][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.915615][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.925576][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.936041][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.947378][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.954603][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 26.954616][ T29] audit: type=1326 audit(1728942584.382:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 26.983458][ T29] audit: type=1326 audit(1728942584.382:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.006504][ T29] audit: type=1326 audit(1728942584.382:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.029444][ T29] audit: type=1326 audit(1728942584.382:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.052273][ T29] audit: type=1326 audit(1728942584.382:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.075200][ T29] audit: type=1326 audit(1728942584.382:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.076267][ T3273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.097925][ T29] audit: type=1326 audit(1728942584.382:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.097969][ T29] audit: type=1326 audit(1728942584.382:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.097990][ T29] audit: type=1326 audit(1728942584.382:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.106713][ T3273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.106740][ T3273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.129549][ T29] audit: type=1326 audit(1728942584.382:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78dfdff9 code=0x7ffc0000 [ 27.152365][ T3273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.288934][ T3439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 27.302222][ T3439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 27.316297][ T3439] Zero length message leads to an empty skb [ 27.424528][ T3463] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 27.432167][ T3465] Cannot find del_set index 0 as target [ 27.468682][ T3469] loop3: detected capacity change from 0 to 1024 [ 27.477661][ T3469] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 27.487605][ T3469] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 27.498905][ T3469] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 27.509555][ T3469] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.24: unexpected bad inode w/o EXT4_IGET_BAD [ 27.523677][ T3469] EXT4-fs (loop3): no journal found [ 27.528938][ T3469] EXT4-fs (loop3): can't get journal size [ 27.548184][ T3469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 27.576187][ T3274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.636721][ T3481] loop1: detected capacity change from 0 to 1024 [ 27.639299][ T3483] syz.3.31 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.653547][ T3481] ======================================================= [ 27.653547][ T3481] WARNING: The mand mount option has been deprecated and [ 27.653547][ T3481] and is ignored by this kernel. Remove the mand [ 27.653547][ T3481] option from the mount to silence this warning. [ 27.653547][ T3481] ======================================================= [ 27.690203][ T3481] EXT4-fs: Ignoring removed bh option [ 27.708179][ T3481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.709932][ T3488] loop3: detected capacity change from 0 to 128 [ 27.740477][ T3481] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 27.752842][ T3481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 27.752842][ T3481] [ 27.762533][ T3481] EXT4-fs (loop1): Total free blocks count 0 [ 27.768647][ T3481] EXT4-fs (loop1): Free/Dirty block details [ 27.774709][ T3481] EXT4-fs (loop1): free_blocks=0 [ 27.779739][ T3481] EXT4-fs (loop1): dirty_blocks=0 [ 27.784864][ T3481] EXT4-fs (loop1): Block reservation details [ 27.790844][ T3481] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 27.794558][ T3488] syz.3.32: attempt to access beyond end of device [ 27.794558][ T3488] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 27.809881][ T3481] syz.1.30 (3481) used greatest stack depth: 10848 bytes left [ 27.819241][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.861543][ T3493] loop1: detected capacity change from 0 to 2048 [ 27.897468][ T3496] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.916348][ T3500] ref_ctr increment failed for inode: 0x26 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888116324540 [ 27.928420][ T3500] uprobe: syz.0.37:3500 failed to unregister, leaking uprobe [ 27.936791][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.958903][ T3502] loop2: detected capacity change from 0 to 128 [ 27.985664][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.005159][ T3504] kernel profiling enabled (shift: 17) [ 28.125997][ T3517] pim6reg1: entered promiscuous mode [ 28.131325][ T3517] pim6reg1: entered allmulticast mode [ 28.248368][ T3532] pim6reg1: entered promiscuous mode [ 28.253718][ T3532] pim6reg1: entered allmulticast mode [ 28.356854][ T3542] syz.3.55[3542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.356992][ T3542] syz.3.55[3542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.371041][ T3542] syz.3.55[3542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.407073][ T3544] loop3: detected capacity change from 0 to 1024 [ 28.461822][ T3546] tipc: Started in network mode [ 28.466956][ T3546] tipc: Node identity 120b6b47fbc9, cluster identity 4711 [ 28.474199][ T3546] tipc: Enabled bearer , priority 0 [ 28.483842][ T3546] ªªªªªª: renamed from syzkaller0 [ 28.490484][ T3546] tipc: Disabling bearer [ 28.643151][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 28.678330][ T3549] hsr_slave_0 (unregistering): left promiscuous mode [ 29.415515][ T3577] Process accounting resumed [ 29.446655][ T3579] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.491702][ T3584] netlink: 72 bytes leftover after parsing attributes in process `syz.1.73'. [ 29.500561][ T3584] netlink: 72 bytes leftover after parsing attributes in process `syz.1.73'. [ 29.871052][ T3607] loop3: detected capacity change from 0 to 512 [ 29.886803][ T3607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.899554][ T3607] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.963532][ T3274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.071948][ T3624] pim6reg1: entered promiscuous mode [ 30.077373][ T3624] pim6reg1: entered allmulticast mode [ 30.161429][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 30.171518][ T3627] ------------[ cut here ]------------ [ 30.177051][ T3627] refcount_t: underflow; use-after-free. [ 30.182890][ T3627] WARNING: CPU: 0 PID: 3627 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 30.192343][ T3627] Modules linked in: [ 30.196259][ T3627] CPU: 0 UID: 0 PID: 3627 Comm: syz.3.91 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 30.206796][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 30.216903][ T3627] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 30.223062][ T3627] Code: 72 ff ff ff e8 ab 85 71 ff 48 c7 c7 3e d9 b2 86 e8 2f 6b 8a ff c6 05 16 31 f4 04 01 90 48 c7 c7 85 a2 1b 86 e8 ab 4b 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 85 71 ff 48 c7 c7 3b d9 b2 86 e8 [ 30.242709][ T3627] RSP: 0018:ffffc9000d61b468 EFLAGS: 00010246 [ 30.248888][ T3627] RAX: c35a05332e663700 RBX: ffff8881048d9ae4 RCX: 0000000000040000 [ 30.256932][ T3627] RDX: ffffc90004401000 RSI: 00000000000056be RDI: 00000000000056bf [ 30.264934][ T3627] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 30.272894][ T3627] R10: 0001ffffffffffff R11: ffff888101765280 R12: ffff8881157cd468 [ 30.280889][ T3627] R13: ffff8881157cd400 R14: ffff8881048d9ae4 R15: 0000000000000000 [ 30.288881][ T3627] FS: 00007f7970cb76c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 30.297834][ T3627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.304528][ T3627] CR2: 0000001b3001bff8 CR3: 0000000116340000 CR4: 00000000003506f0 [ 30.312650][ T3627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.320632][ T3627] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 30.328614][ T3627] Call Trace: [ 30.331893][ T3627] [ 30.334831][ T3627] ? __warn+0x141/0x350 [ 30.339050][ T3627] ? report_bug+0x315/0x420 [ 30.343559][ T3627] ? refcount_warn_saturate+0x1c6/0x230 [ 30.349188][ T3627] ? handle_bug+0x60/0x90 [ 30.353556][ T3627] ? exc_invalid_op+0x1a/0x50 [ 30.358266][ T3627] ? asm_exc_invalid_op+0x1a/0x20 [ 30.363297][ T3627] ? __warn_printk+0x167/0x1b0 [ 30.368079][ T3627] ? refcount_warn_saturate+0x1c6/0x230 [ 30.373686][ T3627] ? refcount_warn_saturate+0x1c5/0x230 [ 30.379384][ T3627] sk_skb_reason_drop+0xe9/0x290 [ 30.384364][ T3627] j1939_session_put+0x157/0x2a0 [ 30.389399][ T3627] j1939_cancel_active_session+0x1d4/0x220 [ 30.395221][ T3627] j1939_netdev_notify+0x13a/0x1b0 [ 30.400448][ T3627] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 30.406095][ T3627] raw_notifier_call_chain+0x6f/0x1d0 [ 30.411532][ T3627] call_netdevice_notifiers_info+0xae/0x100 [ 30.417457][ T3627] dev_close_many+0x174/0x240 [ 30.422162][ T3627] unregister_netdevice_many_notify+0x263/0x11b0 [ 30.428510][ T3627] ? __list_add_valid_or_report+0x36/0xc0 [ 30.434268][ T3627] ? unregister_netdevice_queue+0x12b/0x220 [ 30.440246][ T3627] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 30.446572][ T3627] rtnl_dellink+0x380/0x580 [ 30.451084][ T3627] ? put_dec_trunc8+0x10e/0x130 [ 30.456042][ T3627] ? security_capable+0x81/0x90 [ 30.460929][ T3627] ? ns_capable+0x7d/0xb0 [ 30.465432][ T3627] ? __pfx_rtnl_dellink+0x10/0x10 [ 30.470495][ T3627] rtnetlink_rcv_msg+0x6aa/0x710 [ 30.475467][ T3627] ? __dev_queue_xmit+0x161/0x2040 [ 30.480589][ T3627] ? ref_tracker_alloc+0x1f5/0x2f0 [ 30.485791][ T3627] netlink_rcv_skb+0x12c/0x230 [ 30.490566][ T3627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 30.496101][ T3627] rtnetlink_rcv+0x1c/0x30 [ 30.500562][ T3627] netlink_unicast+0x599/0x670 [ 30.505389][ T3627] netlink_sendmsg+0x5cc/0x6e0 [ 30.510192][ T3627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 30.515557][ T3627] __sock_sendmsg+0x140/0x180 [ 30.520280][ T3627] ____sys_sendmsg+0x312/0x410 [ 30.525142][ T3627] __sys_sendmsg+0x1d9/0x270 [ 30.529793][ T3627] ? futex_wait+0x18e/0x1c0 [ 30.534349][ T3627] __x64_sys_sendmsg+0x46/0x50 [ 30.539134][ T3627] x64_sys_call+0x2689/0x2d60 [ 30.543814][ T3627] do_syscall_64+0xc9/0x1c0 [ 30.548357][ T3627] ? clear_bhb_loop+0x55/0xb0 [ 30.553141][ T3627] ? clear_bhb_loop+0x55/0xb0 [ 30.557866][ T3627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.563783][ T3627] RIP: 0033:0x7f797203dff9 [ 30.568238][ T3627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.587944][ T3627] RSP: 002b:00007f7970cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.596417][ T3627] RAX: ffffffffffffffda RBX: 00007f79721f5f80 RCX: 00007f797203dff9 [ 30.604563][ T3627] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 30.612693][ T3627] RBP: 00007f79720b0296 R08: 0000000000000000 R09: 0000000000000000 [ 30.620734][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.628758][ T3627] R13: 0000000000000000 R14: 00007f79721f5f80 R15: 00007ffdefd53b18 [ 30.636774][ T3627] [ 30.639804][ T3627] ---[ end trace 0000000000000000 ]--- [ 30.711481][ T3639] syz.2.94[3639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.711619][ T3639] syz.2.94[3639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.723913][ T3639] syz.2.94[3639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.802342][ T3656] loop4: detected capacity change from 0 to 1024 [ 30.902478][ T3669] loop2: detected capacity change from 0 to 128 [ 30.936165][ T3375] nci: nci_rsp_packet: unknown rsp opcode 0x205 [ 30.936457][ T3671] pim6reg1: entered promiscuous mode [ 30.947868][ T3671] pim6reg1: entered allmulticast mode [ 30.948677][ T3669] syz.2.104: attempt to access beyond end of device [ 30.948677][ T3669] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 30.969466][ T3667] loop0: detected capacity change from 0 to 8192 [ 30.980710][ T3667] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.009405][ T3375] kworker/u8:7: attempt to access beyond end of device [ 31.009405][ T3375] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 31.068806][ T3678] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 31.079632][ T3678] team0: Failed to send options change via netlink (err -105) [ 31.087185][ T3678] team0: Port device netdevsim1 added [ 31.097355][ T3678] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 31.105842][ T3678] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 31.116471][ T3678] team0: Failed to send options change via netlink (err -105) [ 31.124092][ T3678] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 31.133533][ T3678] team0: Port device netdevsim1 removed [ 31.142046][ T3678] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 31.301824][ T3690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.112'. [ 31.776470][ T3700] sd 0:0:1:0: device reset [ 31.812587][ T3707] pim6reg: entered allmulticast mode [ 31.819610][ T3707] pim6reg: left allmulticast mode [ 31.926724][ T3720] loop2: detected capacity change from 0 to 128 [ 31.933455][ T3720] ================================================================== [ 31.941634][ T3720] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 31.950494][ T3720] [ 31.952803][ T3720] read-write to 0xffff8881004c1830 of 8 bytes by task 3642 on cpu 0: [ 31.960859][ T3720] __filemap_add_folio+0x430/0x6f0 [ 31.965970][ T3720] filemap_add_folio+0x9c/0x1b0 [ 31.970820][ T3720] page_cache_ra_unbounded+0x175/0x310 [ 31.976274][ T3720] page_cache_sync_ra+0x252/0x670 [ 31.981298][ T3720] filemap_get_pages+0x2c1/0x10e0 [ 31.986327][ T3720] filemap_read+0x216/0x680 [ 31.990830][ T3720] blkdev_read_iter+0x20e/0x2c0 [ 31.995668][ T3720] vfs_read+0x5f6/0x720 [ 31.999819][ T3720] ksys_read+0xeb/0x1b0 [ 32.003972][ T3720] __x64_sys_read+0x42/0x50 [ 32.008477][ T3720] x64_sys_call+0x27d3/0x2d60 [ 32.013149][ T3720] do_syscall_64+0xc9/0x1c0 [ 32.017649][ T3720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.023546][ T3720] [ 32.025858][ T3720] read to 0xffff8881004c1830 of 8 bytes by task 3720 on cpu 1: [ 32.033388][ T3720] filemap_write_and_wait_range+0x59/0x2c0 [ 32.039193][ T3720] set_blocksize+0x1d0/0x270 [ 32.043785][ T3720] sb_min_blocksize+0x63/0xe0 [ 32.048460][ T3720] fat_fill_super+0x33a/0x1bf0 [ 32.053220][ T3720] vfat_fill_super+0x24/0x30 [ 32.057886][ T3720] get_tree_bdev+0x256/0x2e0 [ 32.062477][ T3720] vfat_get_tree+0x1c/0x30 [ 32.066973][ T3720] vfs_get_tree+0x56/0x1e0 [ 32.071388][ T3720] do_new_mount+0x227/0x690 [ 32.075891][ T3720] path_mount+0x49b/0xb30 [ 32.080215][ T3720] __se_sys_mount+0x27c/0x2d0 [ 32.084892][ T3720] __x64_sys_mount+0x67/0x80 [ 32.089477][ T3720] x64_sys_call+0x203e/0x2d60 [ 32.094150][ T3720] do_syscall_64+0xc9/0x1c0 [ 32.098643][ T3720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.104548][ T3720] [ 32.106866][ T3720] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 32.113957][ T3720] [ 32.116266][ T3720] Reported by Kernel Concurrency Sanitizer on: [ 32.122409][ T3720] CPU: 1 UID: 0 PID: 3720 Comm: syz.2.125 Tainted: G W 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 32.134464][ T3720] Tainted: [W]=WARN [ 32.138250][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 32.148298][ T3720] ================================================================== [ 32.180239][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 32.180252][ T29] audit: type=1326 audit(1728942589.612:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.209908][ T29] audit: type=1326 audit(1728942589.612:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.218980][ T3720] syz.2.125: attempt to access beyond end of device [ 32.218980][ T3720] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 32.233143][ T29] audit: type=1326 audit(1728942589.612:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.269607][ T29] audit: type=1326 audit(1728942589.612:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.292957][ T29] audit: type=1326 audit(1728942589.612:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.316148][ T29] audit: type=1326 audit(1728942589.612:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.339573][ T29] audit: type=1400 audit(1728942589.612:418): avc: denied { create } for pid=3717 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.359281][ T29] audit: type=1326 audit(1728942589.612:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.382551][ T29] audit: type=1326 audit(1728942589.612:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.405758][ T29] audit: type=1326 audit(1728942589.612:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b63dedff9 code=0x7ffc0000 [ 32.500610][ T3362] kworker/u8:6: attempt to access beyond end of device [ 32.500610][ T3362] loop2: rw=1, sector=241, nr_sectors = 800 limit=128