last executing test programs: 23.93198599s ago: executing program 2 (id=54): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) shutdown(r0, 0x1) 23.91130151s ago: executing program 2 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x4080) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x9, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000890) 23.833375762s ago: executing program 2 (id=56): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0xa499}], 0x1, 0x10000, 0x0) 23.158568294s ago: executing program 3 (id=74): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 23.158146864s ago: executing program 4 (id=75): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10) 23.126430445s ago: executing program 3 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42b00, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x1) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000000)={0x1ffffffffffffd08, &(0x7f0000000100)=[{0x8, 0x60, 0x0, 0xfffffffe}]}) 23.117149195s ago: executing program 4 (id=77): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000040)) 23.063306976s ago: executing program 3 (id=79): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 23.047542236s ago: executing program 3 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) 23.031024417s ago: executing program 4 (id=81): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22.973759918s ago: executing program 2 (id=83): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) 22.967666428s ago: executing program 4 (id=84): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 22.919327799s ago: executing program 3 (id=86): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) 22.86759418s ago: executing program 2 (id=87): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x14d15e7acb67ff97) 22.806188911s ago: executing program 4 (id=88): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x78}}, 0x0) 22.701570543s ago: executing program 4 (id=89): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0xa, 0x1002, &(0x7f0000001cc0)=""/4098, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r0 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x126) fsopen(0x0, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x3ffffffc) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 22.691030843s ago: executing program 32 (id=89): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0xa, 0x1002, &(0x7f0000001cc0)=""/4098, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r0 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x126) fsopen(0x0, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x3ffffffc) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 22.678587644s ago: executing program 3 (id=91): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x810}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x4a) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 22.657180494s ago: executing program 33 (id=91): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x810}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x4a) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 22.602358945s ago: executing program 2 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 21.526087026s ago: executing program 34 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 2.960069713s ago: executing program 1 (id=462): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x2040, 0x0, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb62}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.346518275s ago: executing program 6 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x20000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2504"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.126238709s ago: executing program 6 (id=475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="e3", 0x1}], 0x1, 0x8) fcntl$setpipe(r2, 0x407, 0x176) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x9) 2.10354313s ago: executing program 1 (id=477): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 1.59295551s ago: executing program 1 (id=482): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x5, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000006000000814410004887c3abcf657d43d2b60efaafd6098c"], 0x1c) 1.506519321s ago: executing program 1 (id=486): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x14020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x95, 0x5}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x40, 0xfffffffa, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b7, &(0x7f0000000a40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.404932133s ago: executing program 1 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 1.154885568s ago: executing program 1 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be002829fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 977.927371ms ago: executing program 7 (id=493): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r1, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 876.281053ms ago: executing program 7 (id=495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 649.587468ms ago: executing program 7 (id=497): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 473.090721ms ago: executing program 6 (id=498): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 472.871061ms ago: executing program 5 (id=499): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0x12}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0) close(0x4) 472.369501ms ago: executing program 7 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 396.879063ms ago: executing program 5 (id=502): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 371.001213ms ago: executing program 7 (id=503): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 362.817653ms ago: executing program 0 (id=504): openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x0, 0x27f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket(0x28, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 340.665734ms ago: executing program 6 (id=505): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 277.123415ms ago: executing program 5 (id=506): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r1, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 225.721616ms ago: executing program 0 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 225.531526ms ago: executing program 7 (id=509): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) perf_event_open(0x0, r2, 0x10, r1, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x20, 0x2400e044}, 0x0) 173.995077ms ago: executing program 5 (id=510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x18) listen(0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x3510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x7}, 0x800, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 115.515868ms ago: executing program 6 (id=511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 115.032118ms ago: executing program 0 (id=521): syz_io_uring_setup(0x399a, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0), &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x13b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 92.139379ms ago: executing program 6 (id=512): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x97, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 89.732209ms ago: executing program 0 (id=513): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x80) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 70.663639ms ago: executing program 0 (id=514): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0x12}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0) close(0x4) 70.476919ms ago: executing program 5 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 41.26021ms ago: executing program 5 (id=516): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_open_pts(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c42", 0x21) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 0s ago: executing program 0 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 24.338480][ T29] audit: type=1400 audit(1757934736.354:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.339307][ T3292] cgroup: Unknown subsys name 'net' [ 24.361220][ T29] audit: type=1400 audit(1757934736.354:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.388527][ T29] audit: type=1400 audit(1757934736.384:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.500037][ T3292] cgroup: Unknown subsys name 'cpuset' [ 24.506214][ T3292] cgroup: Unknown subsys name 'rlimit' [ 24.675306][ T29] audit: type=1400 audit(1757934736.694:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.698640][ T29] audit: type=1400 audit(1757934736.694:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.719102][ T29] audit: type=1400 audit(1757934736.694:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.739469][ T29] audit: type=1400 audit(1757934736.694:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.759790][ T29] audit: type=1400 audit(1757934736.704:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.766747][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.784605][ T29] audit: type=1400 audit(1757934736.704:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.816380][ T29] audit: type=1400 audit(1757934736.814:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.864103][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.940313][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 25.973829][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.022835][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.029922][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.037016][ T3303] bridge_slave_0: entered allmulticast mode [ 26.043584][ T3303] bridge_slave_0: entered promiscuous mode [ 26.051641][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.058685][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.066029][ T3303] bridge_slave_1: entered allmulticast mode [ 26.072309][ T3303] bridge_slave_1: entered promiscuous mode [ 26.087536][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.119676][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.126790][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.134017][ T3307] bridge_slave_0: entered allmulticast mode [ 26.140667][ T3307] bridge_slave_0: entered promiscuous mode [ 26.160665][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.169786][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.176859][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.184132][ T3307] bridge_slave_1: entered allmulticast mode [ 26.190467][ T3307] bridge_slave_1: entered promiscuous mode [ 26.208617][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.238676][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.248577][ T3303] team0: Port device team_slave_0 added [ 26.257534][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.266761][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.275596][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.284654][ T3303] team0: Port device team_slave_1 added [ 26.333377][ T3307] team0: Port device team_slave_0 added [ 26.339244][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.346317][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.353466][ T3308] bridge_slave_0: entered allmulticast mode [ 26.360027][ T3308] bridge_slave_0: entered promiscuous mode [ 26.371780][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.378742][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.404721][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.416896][ T3307] team0: Port device team_slave_1 added [ 26.422775][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.429782][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.455747][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.466444][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.473657][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.480857][ T3308] bridge_slave_1: entered allmulticast mode [ 26.487260][ T3308] bridge_slave_1: entered promiscuous mode [ 26.523742][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.530718][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.556664][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.568391][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.591290][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.598290][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.624422][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.636790][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.667359][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.674466][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.682514][ T3302] bridge_slave_0: entered allmulticast mode [ 26.688846][ T3302] bridge_slave_0: entered promiscuous mode [ 26.697269][ T3303] hsr_slave_0: entered promiscuous mode [ 26.703449][ T3303] hsr_slave_1: entered promiscuous mode [ 26.709583][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.716614][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.723817][ T3305] bridge_slave_0: entered allmulticast mode [ 26.730278][ T3305] bridge_slave_0: entered promiscuous mode [ 26.741867][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.748986][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.756100][ T3302] bridge_slave_1: entered allmulticast mode [ 26.762568][ T3302] bridge_slave_1: entered promiscuous mode [ 26.772705][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.779893][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.787032][ T3305] bridge_slave_1: entered allmulticast mode [ 26.793405][ T3305] bridge_slave_1: entered promiscuous mode [ 26.805012][ T3308] team0: Port device team_slave_0 added [ 26.821453][ T3307] hsr_slave_0: entered promiscuous mode [ 26.827365][ T3307] hsr_slave_1: entered promiscuous mode [ 26.833209][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.838946][ T3307] Cannot create hsr debugfs directory [ 26.849350][ T3308] team0: Port device team_slave_1 added [ 26.871224][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.894606][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.904761][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.925513][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.934899][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.941860][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.967821][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.004182][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.011143][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.037087][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.051272][ T3305] team0: Port device team_slave_0 added [ 27.069970][ T3305] team0: Port device team_slave_1 added [ 27.086024][ T3302] team0: Port device team_slave_0 added [ 27.094947][ T3302] team0: Port device team_slave_1 added [ 27.124520][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.131527][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.157502][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.184356][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.191400][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.217282][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.228151][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.235123][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.261057][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.275920][ T3308] hsr_slave_0: entered promiscuous mode [ 27.281941][ T3308] hsr_slave_1: entered promiscuous mode [ 27.287667][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.293398][ T3308] Cannot create hsr debugfs directory [ 27.306200][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.313170][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.339273][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.393245][ T3302] hsr_slave_0: entered promiscuous mode [ 27.399129][ T3302] hsr_slave_1: entered promiscuous mode [ 27.405047][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.410828][ T3302] Cannot create hsr debugfs directory [ 27.430041][ T3305] hsr_slave_0: entered promiscuous mode [ 27.436131][ T3305] hsr_slave_1: entered promiscuous mode [ 27.442038][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 27.447741][ T3305] Cannot create hsr debugfs directory [ 27.470126][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.494767][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.503336][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.525966][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.562728][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.573318][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.599991][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.618744][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.647933][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.660456][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.676448][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.685802][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.722903][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.730607][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.738795][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.747511][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.763562][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.789278][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.799787][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.808365][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.817623][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.830307][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.837377][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.846211][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.864413][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.877929][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.885022][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.913943][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.928810][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.935880][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.953067][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.964290][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.971356][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.992087][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.013931][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.021108][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.046698][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.061757][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.068878][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.095320][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.116124][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.126622][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.143771][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.150860][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.172580][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.179785][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.200298][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.210925][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.231544][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.238596][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.255476][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.272499][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.279642][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.298711][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.307577][ T3307] veth0_vlan: entered promiscuous mode [ 28.340085][ T3307] veth1_vlan: entered promiscuous mode [ 28.407436][ T3307] veth0_macvtap: entered promiscuous mode [ 28.421947][ T3307] veth1_macvtap: entered promiscuous mode [ 28.433471][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.443587][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.459354][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.467758][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.488985][ T295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.498219][ T295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.525543][ T295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.536683][ T3303] veth0_vlan: entered promiscuous mode [ 28.568987][ T295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.590427][ T3303] veth1_vlan: entered promiscuous mode [ 28.604808][ T3308] veth0_vlan: entered promiscuous mode [ 28.613288][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.615265][ T3308] veth1_vlan: entered promiscuous mode [ 28.646467][ T3302] veth0_vlan: entered promiscuous mode [ 28.661431][ T3308] veth0_macvtap: entered promiscuous mode [ 28.668325][ T3308] veth1_macvtap: entered promiscuous mode [ 28.676803][ T3303] veth0_macvtap: entered promiscuous mode [ 28.690683][ T3302] veth1_vlan: entered promiscuous mode [ 28.697915][ T3303] veth1_macvtap: entered promiscuous mode [ 28.720599][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.739351][ T3302] veth0_macvtap: entered promiscuous mode [ 28.746428][ T3305] veth0_vlan: entered promiscuous mode [ 28.757641][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.767198][ T3302] veth1_macvtap: entered promiscuous mode [ 28.774891][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.788284][ T3305] veth1_vlan: entered promiscuous mode [ 28.801920][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.809132][ T1467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.824130][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.835206][ T1467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.866018][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.873452][ T1467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.875945][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 28.893921][ T3305] veth0_macvtap: entered promiscuous mode [ 28.906359][ T3483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 28.911708][ T3305] veth1_macvtap: entered promiscuous mode [ 28.925410][ T1467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.934439][ T1467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.947031][ T1467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.967894][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.978397][ T3486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.998727][ T1467] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.018574][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.027542][ T1467] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.041279][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.050118][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.063102][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.087308][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.116462][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.134041][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.153373][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.184081][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.186769][ T3502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 29.200694][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.220411][ T3506] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12'. [ 29.234726][ T3506] hsr_slave_0: left promiscuous mode [ 29.242112][ T3506] hsr_slave_1: left promiscuous mode [ 29.260116][ T3502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3502 comm=syz.1.10 [ 29.276832][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 29.287961][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 29.341306][ T3515] ======================================================= [ 29.341306][ T3515] WARNING: The mand mount option has been deprecated and [ 29.341306][ T3515] and is ignored by this kernel. Remove the mand [ 29.341306][ T3515] option from the mount to silence this warning. [ 29.341306][ T3515] ======================================================= [ 29.352194][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 29.352208][ T29] audit: type=1400 audit(1757934741.364:123): avc: denied { create } for pid=3516 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.402507][ T29] audit: type=1400 audit(1757934741.364:124): avc: denied { bind } for pid=3516 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.422552][ T29] audit: type=1400 audit(1757934741.364:125): avc: denied { setopt } for pid=3516 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.442768][ T29] audit: type=1400 audit(1757934741.364:126): avc: denied { write } for pid=3516 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.462885][ T29] audit: type=1400 audit(1757934741.364:127): avc: denied { read } for pid=3516 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.483666][ T29] audit: type=1400 audit(1757934741.404:128): avc: denied { execute } for pid=3511 comm="syz.3.15" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 29.509555][ T29] audit: type=1400 audit(1757934741.444:129): avc: denied { unmount } for pid=3514 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.530992][ T3517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.563418][ T29] audit: type=1400 audit(1757934741.574:130): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 29.583637][ T29] audit: type=1400 audit(1757934741.584:131): avc: denied { setopt } for pid=3521 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.617297][ T29] audit: type=1400 audit(1757934741.634:132): avc: denied { write } for pid=3523 comm="syz.1.19" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 29.933999][ T3542] loop2: detected capacity change from 0 to 1024 [ 29.942783][ T3542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.980782][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.070890][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.195240][ T3517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.215608][ T3556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.346584][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 30.364254][ T3564] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 30.404590][ T3570] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 30.443973][ T3575] loop4: detected capacity change from 0 to 128 [ 30.456746][ T3575] EXT4-fs: Ignoring removed nobh option [ 30.471019][ T3575] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.484446][ T3575] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.515028][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.559914][ T3585] loop4: detected capacity change from 0 to 512 [ 30.580477][ T3585] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 30.595940][ T3585] EXT4-fs (loop4): mount failed [ 30.608202][ T3585] netlink: 27 bytes leftover after parsing attributes in process `syz.4.45'. [ 30.733257][ T3595] syzkaller0: entered promiscuous mode [ 30.738819][ T3595] syzkaller0: entered allmulticast mode [ 30.755804][ T3595] syzkaller0: tun_net_xmit 1280 [ 31.194619][ T3599] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.302410][ T3517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.683174][ T3517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.725439][ T3466] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.736273][ T1467] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.747323][ T1467] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.757782][ T1467] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.878989][ C1] hrtimer: interrupt took 28082 ns [ 31.905263][ T3617] hub 9-0:1.0: USB hub found [ 31.910647][ T3617] hub 9-0:1.0: 8 ports detected [ 32.092581][ T3638] Zero length message leads to an empty skb [ 32.130666][ T3644] netem: change failed [ 32.165547][ T3650] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 32.184022][ T3650] veth3: entered promiscuous mode [ 32.241075][ T3650] syz.1.73 (3650) used greatest stack depth: 10824 bytes left [ 32.316720][ T3668] tipc: Started in network mode [ 32.321685][ T3668] tipc: Node identity 823a333e86d2, cluster identity 4711 [ 32.328841][ T3668] tipc: Enabled bearer , priority 0 [ 32.342951][ T3668] tipc: Disabling bearer [ 32.388428][ T3677] loop4: detected capacity change from 0 to 512 [ 32.431030][ T3677] EXT4-fs (loop4): too many log groups per flexible block group [ 32.438782][ T3677] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 32.456783][ T3677] EXT4-fs (loop4): mount failed [ 32.629903][ T3303] syz-executor (3303) used greatest stack depth: 10720 bytes left [ 32.650758][ T3305] syz-executor (3305) used greatest stack depth: 10320 bytes left [ 32.664875][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.704324][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.741728][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.781840][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.836306][ T31] bridge_slave_1: left allmulticast mode [ 32.842232][ T31] bridge_slave_1: left promiscuous mode [ 32.847935][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.855854][ T31] bridge_slave_0: left allmulticast mode [ 32.861662][ T31] bridge_slave_0: left promiscuous mode [ 32.867306][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.941527][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.951834][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.961186][ T31] bond0 (unregistering): Released all slaves [ 33.001143][ T31] tipc: Left network mode [ 33.007537][ T31] hsr_slave_0: left promiscuous mode [ 33.014092][ T31] hsr_slave_1: left promiscuous mode [ 33.019658][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.027026][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.034692][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.042074][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.052053][ T31] veth1_macvtap: left promiscuous mode [ 33.057598][ T31] veth0_macvtap: left promiscuous mode [ 33.063189][ T31] veth1_vlan: left promiscuous mode [ 33.068389][ T31] veth0_vlan: left promiscuous mode [ 33.118397][ T31] team0 (unregistering): Port device team_slave_1 removed [ 33.128122][ T31] team0 (unregistering): Port device team_slave_0 removed [ 33.412173][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.471849][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.541782][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.581688][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.653411][ T31] bridge_slave_1: left allmulticast mode [ 33.659150][ T31] bridge_slave_1: left promiscuous mode [ 33.664917][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.672594][ T31] bridge_slave_0: left allmulticast mode [ 33.678216][ T31] bridge_slave_0: left promiscuous mode [ 33.683956][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.760932][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.770881][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.780468][ T31] bond0 (unregistering): Released all slaves [ 33.843289][ T31] hsr_slave_0: left promiscuous mode [ 33.869860][ T31] hsr_slave_1: left promiscuous mode [ 33.875452][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.883102][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.891924][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.899311][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.908790][ T31] veth1_macvtap: left promiscuous mode [ 33.914467][ T31] veth0_macvtap: left promiscuous mode [ 33.920163][ T31] veth1_vlan: left promiscuous mode [ 33.925430][ T31] veth0_vlan: left promiscuous mode [ 33.978887][ T31] team0 (unregistering): Port device team_slave_1 removed [ 33.989658][ T31] team0 (unregistering): Port device team_slave_0 removed [ 34.142314][ T3717] chnl_net:caif_netlink_parms(): no params data found [ 34.169245][ T3718] chnl_net:caif_netlink_parms(): no params data found [ 34.196569][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.204161][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.211392][ T3717] bridge_slave_0: entered allmulticast mode [ 34.217697][ T3717] bridge_slave_0: entered promiscuous mode [ 34.227942][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.235057][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.242295][ T3717] bridge_slave_1: entered allmulticast mode [ 34.248636][ T3717] bridge_slave_1: entered promiscuous mode [ 34.274719][ T3717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.284675][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.291772][ T3718] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.298972][ T3718] bridge_slave_0: entered allmulticast mode [ 34.305400][ T3718] bridge_slave_0: entered promiscuous mode [ 34.312746][ T3717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.326354][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.333412][ T3718] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.340549][ T3718] bridge_slave_1: entered allmulticast mode [ 34.346821][ T3718] bridge_slave_1: entered promiscuous mode [ 34.366008][ T3717] team0: Port device team_slave_0 added [ 34.372802][ T3718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.383044][ T3718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.392603][ T3717] team0: Port device team_slave_1 added [ 34.416002][ T3718] team0: Port device team_slave_0 added [ 34.422530][ T3718] team0: Port device team_slave_1 added [ 34.428479][ T3717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.435449][ T3717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.461510][ T3717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.482047][ T3717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.488981][ T3717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.514953][ T3717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.538140][ T3718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.545194][ T3718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.571096][ T3718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.590897][ T3718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.597871][ T3718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.623804][ T3718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.634485][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 34.634552][ T29] audit: type=1400 audit(1757934746.644:271): avc: denied { getopt } for pid=3752 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.659990][ T29] audit: type=1400 audit(1757934746.644:272): avc: denied { create } for pid=3752 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 34.679143][ T29] audit: type=1400 audit(1757934746.644:273): avc: denied { connect } for pid=3752 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 34.727093][ T3717] hsr_slave_0: entered promiscuous mode [ 34.735722][ T3717] hsr_slave_1: entered promiscuous mode [ 34.760930][ T3718] hsr_slave_0: entered promiscuous mode [ 34.767079][ T3718] hsr_slave_1: entered promiscuous mode [ 34.773113][ T3718] debugfs: 'hsr0' already exists in 'hsr' [ 34.778843][ T3718] Cannot create hsr debugfs directory [ 34.867113][ T3717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 34.883531][ T3717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 34.898396][ T3717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 34.908795][ T3717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 34.935733][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.942863][ T3717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.950230][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.957239][ T3717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.984097][ T3718] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 34.996032][ T3754] chnl_net:caif_netlink_parms(): no params data found [ 35.005988][ T3718] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 35.014818][ T3718] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 35.025923][ T3718] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 35.065344][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.072397][ T3718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.079698][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.086769][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.100541][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.107660][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.115510][ T3754] bridge_slave_0: entered allmulticast mode [ 35.122338][ T3754] bridge_slave_0: entered promiscuous mode [ 35.128844][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.136000][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.143245][ T3754] bridge_slave_1: entered allmulticast mode [ 35.149749][ T3754] bridge_slave_1: entered promiscuous mode [ 35.170857][ T3754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.183000][ T3754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.205932][ T3754] team0: Port device team_slave_0 added [ 35.212586][ T3754] team0: Port device team_slave_1 added [ 35.224923][ T3717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.238303][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.245314][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.271230][ T3754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.285495][ T3717] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.293777][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.301651][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.310821][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.320125][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.336748][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.343704][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.369694][ T3754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.392408][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.399570][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.415818][ T3754] hsr_slave_0: entered promiscuous mode [ 35.421964][ T3754] hsr_slave_1: entered promiscuous mode [ 35.428027][ T3754] debugfs: 'hsr0' already exists in 'hsr' [ 35.433775][ T3754] Cannot create hsr debugfs directory [ 35.442331][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.449416][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.510390][ T3789] process 'syz.0.102' launched '/dev/fd/6' with NULL argv: empty string added [ 35.520781][ T29] audit: type=1400 audit(1757934747.534:274): avc: denied { execute_no_trans } for pid=3788 comm="syz.0.102" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.563415][ T3718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.571996][ T3717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.606948][ T3718] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.615133][ T29] audit: type=1326 audit(1757934747.634:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f3ceba9 code=0x7ffc0000 [ 35.638603][ T29] audit: type=1326 audit(1757934747.634:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f3ceba9 code=0x7ffc0000 [ 35.666021][ T29] audit: type=1326 audit(1757934747.634:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68f3ceba9 code=0x7ffc0000 [ 35.672822][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.689336][ T29] audit: type=1326 audit(1757934747.634:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f3ceba9 code=0x7ffc0000 [ 35.696331][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.719550][ T29] audit: type=1326 audit(1757934747.634:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f3ceba9 code=0x7ffc0000 [ 35.749910][ T29] audit: type=1326 audit(1757934747.634:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68f3ceba9 code=0x7ffc0000 [ 35.812646][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.819846][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.837619][ T3754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.856827][ T3718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.867239][ T3718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.897808][ T3754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.920816][ T3754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.930894][ T3754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.982783][ T3717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.053109][ T3718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.072030][ T3754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.115828][ T3754] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.151752][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.158881][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.176249][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.183325][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.329937][ T3717] veth0_vlan: entered promiscuous mode [ 36.358919][ T3717] veth1_vlan: entered promiscuous mode [ 36.387963][ T3717] veth0_macvtap: entered promiscuous mode [ 36.408414][ T3847] __nla_validate_parse: 9 callbacks suppressed [ 36.408429][ T3847] netlink: 96 bytes leftover after parsing attributes in process `syz.1.108'. [ 36.432967][ T3754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.443542][ T3717] veth1_macvtap: entered promiscuous mode [ 36.459525][ T3718] veth0_vlan: entered promiscuous mode [ 36.473830][ T3718] veth1_vlan: entered promiscuous mode [ 36.490641][ T3717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.530241][ T3717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.548455][ T3718] veth0_macvtap: entered promiscuous mode [ 36.572174][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.589055][ T3718] veth1_macvtap: entered promiscuous mode [ 36.619099][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.640546][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.649290][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.675415][ T3718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.701079][ T3718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.726784][ T3754] veth0_vlan: entered promiscuous mode [ 36.740034][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.748953][ T31] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.781667][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.801479][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.823797][ T3754] veth1_vlan: entered promiscuous mode [ 36.870060][ T3754] veth0_macvtap: entered promiscuous mode [ 36.877596][ T3754] veth1_macvtap: entered promiscuous mode [ 36.888402][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.931268][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.951345][ T3466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.988286][ T3466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.999035][ T3466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.025008][ T3466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.247915][ T3886] veth0_to_team: entered promiscuous mode [ 37.278896][ T3889] SELinux: ebitmap: truncated map [ 37.287925][ T3889] SELinux: failed to load policy [ 37.333542][ T3893] netlink: 96 bytes leftover after parsing attributes in process `syz.1.118'. [ 37.377929][ T3895] geneve2: entered promiscuous mode [ 37.383360][ T3895] geneve2: entered allmulticast mode [ 37.409596][ T51] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.409860][ T31] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.410204][ T31] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.410471][ T31] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.467932][ T3902] loop6: detected capacity change from 0 to 1024 [ 37.475764][ T3902] EXT4-fs: Ignoring removed bh option [ 37.512000][ T3902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.538649][ T3898] EXT4-fs error (device loop6): ext4_xattr_set_entry:1660: inode #15: comm syz.6.120: corrupted xattr entries [ 37.582059][ T3901] mmap: syz.5.121 (3901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.604171][ T3898] EXT4-fs (loop6): Remounting filesystem read-only [ 37.628463][ T3898] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #19: comm syz.6.120: dec ref error=-30 [ 37.702098][ T3717] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.791040][ T3909] loop1: detected capacity change from 0 to 128 [ 37.946702][ T3930] netlink: 16 bytes leftover after parsing attributes in process `syz.7.129'. [ 37.956800][ T3927] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.997853][ T3909] syz.1.123: attempt to access beyond end of device [ 37.997853][ T3909] loop1: rw=524288, sector=369, nr_sectors = 256 limit=128 [ 38.031963][ T3929] pim6reg1: entered promiscuous mode [ 38.037361][ T3929] pim6reg1: entered allmulticast mode [ 38.080678][ T3909] syz.1.123: attempt to access beyond end of device [ 38.080678][ T3909] loop1: rw=524288, sector=625, nr_sectors = 256 limit=128 [ 38.102358][ T3909] syz.1.123: attempt to access beyond end of device [ 38.102358][ T3909] loop1: rw=0, sector=369, nr_sectors = 8 limit=128 [ 38.163277][ T3909] syz.1.123: attempt to access beyond end of device [ 38.163277][ T3909] loop1: rw=0, sector=369, nr_sectors = 8 limit=128 [ 38.256307][ T3412] IPVS: starting estimator thread 0... [ 38.310153][ T3943] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.349443][ T3941] IPVS: using max 2352 ests per chain, 117600 per kthread [ 38.394858][ T3948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 38.403877][ T3948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 38.551618][ T3927] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.635323][ T3950] loop1: detected capacity change from 0 to 8192 [ 38.689791][ T3900] loop1: p1 p2 p3 p4 [ 38.694181][ T3900] loop1: p1 start 51379968 is beyond EOD, truncated [ 38.703471][ T3900] loop1: p3 size 15991040 extends beyond EOD, truncated [ 38.721527][ T3900] loop1: p4 start 16711680 is beyond EOD, truncated [ 38.729802][ T3950] loop1: p1 p2 p3 p4 [ 38.734104][ T3950] loop1: p1 start 51379968 is beyond EOD, truncated [ 38.742430][ T3950] loop1: p3 size 15991040 extends beyond EOD, truncated [ 38.761546][ T3950] loop1: p4 start 16711680 is beyond EOD, truncated [ 38.806703][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.817821][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.849341][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.851157][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.932339][ T3927] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.994159][ T3927] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.097311][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.118098][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.149089][ T3964] capability: warning: `syz.7.146' uses deprecated v2 capabilities in a way that may be insecure [ 39.164202][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.201972][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.596732][ T3943] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.666960][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 39.666975][ T29] audit: type=1326 audit(1757934751.684:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.707849][ T3993] loop7: detected capacity change from 0 to 256 [ 39.724923][ T29] audit: type=1326 audit(1757934751.684:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.732953][ T3993] vfat: Unknown parameter 'u_xlate' [ 39.748305][ T29] audit: type=1326 audit(1757934751.684:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.776751][ T29] audit: type=1326 audit(1757934751.684:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.799987][ T29] audit: type=1326 audit(1757934751.684:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.823507][ T29] audit: type=1326 audit(1757934751.684:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.846731][ T29] audit: type=1326 audit(1757934751.684:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.869994][ T29] audit: type=1326 audit(1757934751.684:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.887457][ T3993] loop7: detected capacity change from 0 to 1024 [ 39.893350][ T29] audit: type=1326 audit(1757934751.684:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.922717][ T29] audit: type=1326 audit(1757934751.684:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.7.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b305eba9 code=0x7ffc0000 [ 39.929987][ T3993] EXT4-fs: Ignoring removed bh option [ 39.951534][ T3993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.003711][ T3972] v: renamed from ip6_vti0 (while UP) [ 40.009773][ T3993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.114060][ T3718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.177958][ T4008] wg2: entered promiscuous mode [ 40.183029][ T4008] wg2: entered allmulticast mode [ 40.209038][ T4012] loop7: detected capacity change from 0 to 512 [ 40.241289][ T4012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.253953][ T4012] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.273965][ T4012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.313823][ T3943] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.373891][ T4026] syzkaller0: entered promiscuous mode [ 40.379408][ T4026] syzkaller0: entered allmulticast mode [ 40.396397][ T3943] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.451051][ T66] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.469639][ T66] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.477890][ T66] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.490050][ T66] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.269121][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 41.311026][ T4104] loop5: detected capacity change from 0 to 164 [ 41.347272][ T4104] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.375510][ T4100] syzkaller0: entered promiscuous mode [ 41.381023][ T4100] syzkaller0: entered allmulticast mode [ 41.396726][ T4104] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.438051][ T4104] rock: directory entry would overflow storage [ 41.444295][ T4104] rock: sig=0x4f50, size=4, remaining=3 [ 41.449868][ T4104] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.152851][ T4164] syz.0.219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.531183][ T4173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.222'. [ 42.598429][ T4175] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 42.748512][ T4181] loop5: detected capacity change from 0 to 512 [ 42.769540][ T4181] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.782619][ T4181] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 42.800219][ T4181] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.226: corrupted xattr entries [ 42.811913][ T4181] EXT4-fs (loop5): Remounting filesystem read-only [ 42.818451][ T4181] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.849464][ T4181] EXT4-fs (loop5): 1 truncate cleaned up [ 42.855635][ T4181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.873240][ T4188] syz.7.228 (4188) used greatest stack depth: 9728 bytes left [ 42.901156][ T4192] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 42.911928][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.928543][ T4192] team0 (unregistering): Port device team_slave_0 removed [ 42.938380][ T4192] team0 (unregistering): Port device team_slave_1 removed [ 42.958468][ T4196] veth0: entered promiscuous mode [ 42.969149][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 43.065588][ T4207] loop5: detected capacity change from 0 to 512 [ 43.074765][ T4207] EXT4-fs: Ignoring removed oldalloc option [ 43.085031][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 43.114984][ T4207] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 43.140110][ T4207] EXT4-fs (loop5): 1 truncate cleaned up [ 43.149713][ T4207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.267075][ T4218] syzkaller0: entered promiscuous mode [ 43.272671][ T4218] syzkaller0: entered allmulticast mode [ 43.301177][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.382665][ T4230] netlink: 'syz.1.247': attribute type 11 has an invalid length. [ 43.399308][ T4234] loop6: detected capacity change from 0 to 164 [ 43.469019][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.252'. [ 43.555300][ T4249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 43.623725][ T4257] bond1: entered promiscuous mode [ 43.628935][ T4257] bond1: entered allmulticast mode [ 43.635712][ T4257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.661545][ T4257] bond1 (unregistering): Released all slaves [ 43.844402][ T4277] netlink: 'syz.7.267': attribute type 10 has an invalid length. [ 43.852552][ T4277] netlink: 40 bytes leftover after parsing attributes in process `syz.7.267'. [ 43.881809][ T4277] dummy0: entered promiscuous mode [ 43.891193][ T4277] bridge0: port 3(dummy0) entered blocking state [ 43.897944][ T4277] bridge0: port 3(dummy0) entered disabled state [ 43.906563][ T4277] dummy0: entered allmulticast mode [ 43.923386][ T4277] bridge0: port 3(dummy0) entered blocking state [ 43.930204][ T4277] bridge0: port 3(dummy0) entered forwarding state [ 43.990103][ T4281] netlink: 'syz.6.268': attribute type 1 has an invalid length. [ 43.997774][ T4281] netlink: 224 bytes leftover after parsing attributes in process `syz.6.268'. [ 44.043855][ T4284] loop6: detected capacity change from 0 to 164 [ 44.416051][ T4310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 44.500784][ T4314] vhci_hcd: invalid port number 96 [ 44.505948][ T4314] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 44.519691][ T4314] loop6: detected capacity change from 0 to 512 [ 44.531650][ T4314] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 44.548316][ T4314] EXT4-fs (loop6): 1 truncate cleaned up [ 44.558746][ T4314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.588670][ T3717] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.894633][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 44.916958][ T4341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.937792][ T4341] vlan2: entered allmulticast mode [ 44.943003][ T4341] bond1: entered allmulticast mode [ 44.949441][ T23] IPVS: starting estimator thread 0... [ 44.959060][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.286'. [ 45.049469][ T4336] IPVS: using max 2688 ests per chain, 134400 per kthread [ 45.279388][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 45.285582][ T29] audit: type=1400 audit(1757934757.284:629): avc: denied { ioctl } for pid=4351 comm="syz.0.291" path="socket:[10378]" dev="sockfs" ino=10378 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 45.451694][ T4360] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 45.469158][ T29] audit: type=1326 audit(1757934757.484:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa843eba9 code=0x7ffc0000 [ 45.497681][ T29] audit: type=1326 audit(1757934757.514:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fbfa843eba9 code=0x7ffc0000 [ 45.521006][ T29] audit: type=1326 audit(1757934757.514:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa843eba9 code=0x7ffc0000 [ 45.544331][ T29] audit: type=1326 audit(1757934757.514:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa843eba9 code=0x7ffc0000 [ 45.646714][ T4370] pim6reg1: entered promiscuous mode [ 45.652063][ T4370] pim6reg1: entered allmulticast mode [ 45.735802][ T4377] pim6reg: entered allmulticast mode [ 45.758432][ T4377] pim6reg: left allmulticast mode [ 45.851374][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 45.872753][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 46.045048][ T29] audit: type=1326 audit(1757934758.064:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.6.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 46.068348][ T29] audit: type=1326 audit(1757934758.064:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.6.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 46.092118][ T29] audit: type=1326 audit(1757934758.064:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.6.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 46.115349][ T29] audit: type=1326 audit(1757934758.064:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.6.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 46.139071][ T29] audit: type=1326 audit(1757934758.064:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.6.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 46.668119][ T4429] : renamed from bond0 (while UP) [ 47.004742][ T4447] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.072544][ T4453] netlink: 'syz.7.335': attribute type 1 has an invalid length. [ 47.189782][ T4468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4468 comm=syz.7.341 [ 47.202297][ T4468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4468 comm=syz.7.341 [ 47.266741][ T4476] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.341704][ T4476] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.421174][ T4476] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.531635][ T4476] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.586905][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.599247][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.626190][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.677578][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.865927][ T4494] __nla_validate_parse: 8 callbacks suppressed [ 47.865957][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.352'. [ 48.037315][ T4502] ref_ctr increment failed for inode: 0x168 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810a234500 [ 48.050752][ T4501] uprobe: syz.0.356:4501 failed to unregister, leaking uprobe [ 48.133834][ T4510] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.360'. [ 48.316107][ T4533] veth0_vlan: entered allmulticast mode [ 48.321571][ T4529] netlink: 'syz.6.369': attribute type 10 has an invalid length. [ 48.330078][ T4529] netlink: 40 bytes leftover after parsing attributes in process `syz.6.369'. [ 48.349581][ T4529] dummy0: entered promiscuous mode [ 48.357931][ T4529] bridge0: port 3(dummy0) entered blocking state [ 48.365804][ T4529] bridge0: port 3(dummy0) entered disabled state [ 48.381862][ T4529] dummy0: entered allmulticast mode [ 48.392074][ T4529] bridge0: port 3(dummy0) entered blocking state [ 48.398827][ T4529] bridge0: port 3(dummy0) entered forwarding state [ 48.413248][ T4533] ªªªªªª: renamed from vlan0 [ 48.429296][ T4537] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.372'. [ 48.463099][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.559122][ T4551] loop1: detected capacity change from 0 to 512 [ 48.610810][ T4551] EXT4-fs: Ignoring removed nobh option [ 48.807319][ T4551] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.378: corrupted inode contents [ 48.905082][ T4551] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.378: mark_inode_dirty error [ 48.926769][ T4551] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.378: corrupted inode contents [ 49.072647][ T4568] loop5: detected capacity change from 0 to 2048 [ 49.085118][ T4551] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.378: mark_inode_dirty error [ 49.148731][ T3900] loop5: p1 < > p4 [ 49.180614][ T3900] loop5: p4 size 8388608 extends beyond EOD, truncated [ 49.191858][ T4551] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.378: Failed to acquire dquot type 0 [ 49.208263][ T4551] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.378: corrupted inode contents [ 49.222924][ T4551] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.378: mark_inode_dirty error [ 49.235314][ T4551] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.378: corrupted inode contents [ 49.251657][ T4551] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.378: mark_inode_dirty error [ 49.264448][ T4551] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.378: corrupted inode contents [ 49.278515][ T4551] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 49.327122][ T4551] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.378: corrupted inode contents [ 49.551303][ T4551] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.378: mark_inode_dirty error [ 49.563789][ T4568] loop5: p1 < > p4 [ 49.592266][ T4568] loop5: p4 size 8388608 extends beyond EOD, truncated [ 49.606342][ T4551] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 49.620747][ T2993] loop5: p1 < > p4 [ 49.625398][ T2993] loop5: p4 size 8388608 extends beyond EOD, truncated [ 49.634578][ T4551] EXT4-fs (loop1): 1 truncate cleaned up [ 49.656955][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.672126][ T4551] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.742303][ T4551] syz.1.378 (4551) used greatest stack depth: 9608 bytes left [ 49.756735][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.788435][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 49.789800][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 49.854764][ T4594] loop1: detected capacity change from 0 to 2048 [ 49.903500][ T4594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.964808][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.975388][ T4586] netlink: 'syz.7.392': attribute type 1 has an invalid length. [ 50.213098][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 50.243265][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 50.249133][ T4614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 50.298434][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'. [ 50.313400][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.402'. [ 50.347018][ T3369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3369 comm=kworker/0:2 [ 50.360100][ T4625] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 50.391156][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 50.391170][ T29] audit: type=1400 audit(1757934762.414:697): avc: denied { create } for pid=4626 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.431210][ T4632] hub 9-0:1.0: USB hub found [ 50.438810][ T4632] hub 9-0:1.0: 8 ports detected [ 50.466068][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.409'. [ 50.489012][ T4635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.519741][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.409'. [ 50.557855][ T4635] bond1 (unregistering): Released all slaves [ 50.677723][ T4653] loop5: detected capacity change from 0 to 764 [ 50.740450][ T4663] netlink: 'syz.5.420': attribute type 13 has an invalid length. [ 50.810537][ T4663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.846046][ T29] audit: type=1400 audit(1757934762.864:698): avc: denied { mount } for pid=4669 comm="syz.7.423" name="/" dev="ramfs" ino=10108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.951335][ T4678] program syz.0.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.100745][ T29] audit: type=1400 audit(1757934763.124:699): avc: denied { ioctl } for pid=4690 comm="syz.1.430" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.104152][ T4691] loop1: detected capacity change from 0 to 512 [ 51.158597][ T4691] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.167422][ T4691] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.179870][ T4691] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 51.188837][ T4691] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 51.198681][ T4691] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.430: Failed to acquire dquot type 1 [ 51.222756][ T4691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.430: bg 0: block 40: padding at end of block bitmap is not set [ 51.237701][ T4691] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 51.249659][ T4691] EXT4-fs (loop1): 1 truncate cleaned up [ 51.262470][ T4691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.359754][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.391080][ T29] audit: type=1326 audit(1757934763.414:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.6.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 51.414388][ T29] audit: type=1326 audit(1757934763.414:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.6.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 51.437791][ T29] audit: type=1326 audit(1757934763.414:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.6.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 51.461087][ T29] audit: type=1326 audit(1757934763.414:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.6.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 51.484613][ T29] audit: type=1326 audit(1757934763.414:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.6.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d309eba9 code=0x7ffc0000 [ 51.714333][ T4727] syzkaller0: entered allmulticast mode [ 51.720500][ T4727] syzkaller0: entered promiscuous mode [ 51.727810][ T4727] syzkaller0 (unregistering): left allmulticast mode [ 51.734663][ T4727] syzkaller0 (unregistering): left promiscuous mode [ 51.981956][ T4759] lo: entered allmulticast mode [ 51.993428][ T4759] tunl0: entered allmulticast mode [ 52.000769][ T4759] gre0: entered allmulticast mode [ 52.020642][ T4759] gretap0: entered allmulticast mode [ 52.028755][ T4759] erspan0: entered allmulticast mode [ 52.036604][ T4759] ip_vti0: entered allmulticast mode [ 52.044622][ T4759] ip6_vti0: entered allmulticast mode [ 52.051804][ T4759] sit0: entered allmulticast mode [ 52.059910][ T4759] ip6tnl0: entered allmulticast mode [ 52.087064][ T4759] ip6gre0: entered allmulticast mode [ 52.115507][ T4759] syz_tun: entered allmulticast mode [ 52.128799][ T4759] ip6gretap0: entered allmulticast mode [ 52.143314][ T4759] bridge0: port 3(dummy0) entered disabled state [ 52.149803][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.156989][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.164602][ T4759] bridge0: entered allmulticast mode [ 52.171803][ T4759] vcan0: entered allmulticast mode [ 52.177790][ T4759] bond0: entered allmulticast mode [ 52.182948][ T4759] bond_slave_0: entered allmulticast mode [ 52.188674][ T4759] bond_slave_1: entered allmulticast mode [ 52.227454][ T4759] nlmon0: entered allmulticast mode [ 52.234029][ T4759] caif0: entered allmulticast mode [ 52.246258][ T4759] batadv0: entered allmulticast mode [ 52.262219][ T4759] vxcan0: entered allmulticast mode [ 52.274887][ T4759] vxcan1: entered allmulticast mode [ 52.280987][ T4761] Set syz1 is full, maxelem 65536 reached [ 52.287741][ T4759] veth0: entered allmulticast mode [ 52.294566][ T4759] veth1: entered allmulticast mode [ 52.309715][ T4759] wg0: entered allmulticast mode [ 52.316161][ T4759] wg1: entered allmulticast mode [ 52.329184][ T4759] wg2: entered allmulticast mode [ 52.337758][ T4759] veth0_to_bridge: entered allmulticast mode [ 52.362393][ T4759] veth1_to_bridge: entered allmulticast mode [ 52.372055][ T4759] veth0_to_bond: entered allmulticast mode [ 52.380081][ T4759] veth1_to_bond: entered allmulticast mode [ 52.388635][ T4759] veth0_to_team: entered allmulticast mode [ 52.396341][ T4759] team_slave_0: entered allmulticast mode [ 52.402783][ T4759] veth1_to_team: entered allmulticast mode [ 52.410562][ T4759] team_slave_1: entered allmulticast mode [ 52.416537][ T4759] veth0_to_batadv: entered allmulticast mode [ 52.423842][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.431391][ T4759] batadv_slave_0: entered allmulticast mode [ 52.438794][ T4759] veth1_to_batadv: entered allmulticast mode [ 52.446099][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.453551][ T4759] batadv_slave_1: entered allmulticast mode [ 52.460591][ T4759] xfrm0: entered allmulticast mode [ 52.466425][ T4759] veth0_to_hsr: entered allmulticast mode [ 52.473345][ T4759] hsr_slave_0: entered allmulticast mode [ 52.480071][ T4759] veth1_to_hsr: entered allmulticast mode [ 52.486876][ T4759] hsr_slave_1: entered allmulticast mode [ 52.493420][ T4759] hsr0: entered allmulticast mode [ 52.499492][ T4759] veth1_virt_wifi: entered allmulticast mode [ 52.506311][ T4759] veth0_virt_wifi: entered allmulticast mode [ 52.513943][ T4759] veth1_vlan: entered allmulticast mode [ 52.520516][ T4759] veth0_vlan: entered allmulticast mode [ 52.528817][ T4759] vlan0: entered allmulticast mode [ 52.534068][ T4759] vlan1: entered allmulticast mode [ 52.539482][ T4759] macvlan0: entered allmulticast mode [ 52.545746][ T4759] macvlan1: entered allmulticast mode [ 52.552359][ T4759] ipvlan0: entered allmulticast mode [ 52.557783][ T4759] ipvlan1: entered allmulticast mode [ 52.563387][ T4759] veth1_macvtap: entered allmulticast mode [ 52.570110][ T4759] veth0_macvtap: entered allmulticast mode [ 52.576673][ T4759] macvtap0: entered allmulticast mode [ 52.582993][ T4759] macsec0: entered allmulticast mode [ 52.589413][ T4759] geneve0: entered allmulticast mode [ 52.595847][ T4759] geneve1: entered allmulticast mode [ 52.601903][ T4759] netdevsim netdevsim6 eth0: entered allmulticast mode [ 52.608811][ T4759] netdevsim netdevsim6 eth1: entered allmulticast mode [ 52.615817][ T4759] netdevsim netdevsim6 eth2: entered allmulticast mode [ 52.622877][ T4759] netdevsim netdevsim6 eth3: entered allmulticast mode [ 52.629805][ T4759] ip6_vti1: entered allmulticast mode [ 52.646708][ T4768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.679354][ T4771] bond1 (unregistering): Released all slaves [ 52.708487][ T4773] bridge_slave_0: left allmulticast mode [ 52.714248][ T4773] bridge_slave_0: left promiscuous mode [ 52.720033][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.730602][ T4773] bridge_slave_1: left allmulticast mode [ 52.736234][ T4773] bridge_slave_1: left promiscuous mode [ 52.741992][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.754886][ T4773] bond0: (slave bond_slave_0): Releasing backup interface [ 52.764884][ T4773] bond0: (slave bond_slave_1): Releasing backup interface [ 52.778587][ T4773] team0: Port device team_slave_0 removed [ 52.789223][ T4773] team0: Port device team_slave_1 removed [ 52.796617][ T4773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.804024][ T4773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.821743][ T4773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.829156][ T4773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.867341][ T31] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.878616][ T31] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.920211][ T4788] syzkaller0: entered promiscuous mode [ 52.925714][ T4788] syzkaller0: entered allmulticast mode [ 52.940313][ T31] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.954657][ T31] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.156888][ T4810] 9pnet_fd: Insufficient options for proto=fd [ 53.160767][ T4803] __nla_validate_parse: 5 callbacks suppressed [ 53.160781][ T4803] netlink: 20 bytes leftover after parsing attributes in process `syz.6.472'. [ 53.247014][ T4819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.257399][ T4819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 53.309407][ T4820] loop5: detected capacity change from 0 to 1024 [ 53.335571][ T4820] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0) [ 53.360700][ T4819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.371074][ T4819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 53.484969][ T4819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.495440][ T4819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 53.568545][ T4819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.578938][ T4819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 53.658428][ T66] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 53.666822][ T66] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 53.692119][ T4830] syzkaller0: entered allmulticast mode [ 53.709015][ T66] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 53.717459][ T66] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 53.725787][ T4830] syzkaller0: entered promiscuous mode [ 53.747962][ T66] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 53.756278][ T66] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 53.768854][ T4830] syzkaller0 (unregistering): left allmulticast mode [ 53.775578][ T4830] syzkaller0 (unregistering): left promiscuous mode [ 53.831964][ T4838] loop5: detected capacity change from 0 to 2048 [ 53.839794][ T66] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 53.848139][ T66] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 53.866969][ T4842] loop1: detected capacity change from 0 to 128 [ 53.881822][ T4842] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.907203][ T4842] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.933389][ T4838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.228753][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.879142][ T4883] syzkaller0: entered allmulticast mode [ 54.886011][ T4883] syzkaller0: entered promiscuous mode [ 54.897466][ T4883] syzkaller0 (unregistering): left allmulticast mode [ 54.904227][ T4883] syzkaller0 (unregistering): left promiscuous mode [ 54.987397][ T4898] netlink: 'syz.0.504': attribute type 13 has an invalid length. [ 55.065632][ T4898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.186984][ T4911] : renamed from bond0 (while UP) [ 55.305393][ T4929] loop5: detected capacity change from 0 to 1024 [ 55.313490][ T4929] EXT4-fs: Ignoring removed bh option [ 55.321035][ T4929] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.343017][ T4929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.431302][ T4936] ================================================================== [ 55.439391][ T4936] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 55.447646][ T4936] [ 55.449957][ T4936] write to 0xffff88811a02bb04 of 4 bytes by task 4929 on cpu 0: [ 55.457570][ T4936] xas_set_mark+0x12b/0x140 [ 55.462058][ T4936] __folio_start_writeback+0x1dd/0x440 [ 55.467526][ T4936] ext4_bio_write_folio+0x5ad/0x9f0 [ 55.472732][ T4936] mpage_process_page_bufs+0x4a1/0x620 [ 55.478193][ T4936] mpage_prepare_extent_to_map+0x786/0xc00 [ 55.484014][ T4936] ext4_do_writepages+0xa05/0x2750 [ 55.489168][ T4936] ext4_writepages+0x176/0x300 [ 55.493914][ T4936] do_writepages+0x1c6/0x310 [ 55.498488][ T4936] file_write_and_wait_range+0x156/0x2c0 [ 55.504103][ T4936] generic_buffers_fsync_noflush+0x45/0x120 [ 55.509981][ T4936] ext4_sync_file+0x1ab/0x690 [ 55.514641][ T4936] vfs_fsync_range+0x10d/0x130 [ 55.519475][ T4936] ext4_buffered_write_iter+0x34f/0x3c0 [ 55.525008][ T4936] ext4_file_write_iter+0xdbf/0xf00 [ 55.530194][ T4936] iter_file_splice_write+0x663/0xa60 [ 55.535556][ T4936] direct_splice_actor+0x153/0x2a0 [ 55.540653][ T4936] splice_direct_to_actor+0x30f/0x680 [ 55.546013][ T4936] do_splice_direct+0xda/0x150 [ 55.550758][ T4936] do_sendfile+0x380/0x650 [ 55.555246][ T4936] __x64_sys_sendfile64+0x105/0x150 [ 55.560430][ T4936] x64_sys_call+0x2bb0/0x2ff0 [ 55.565093][ T4936] do_syscall_64+0xd2/0x200 [ 55.569588][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.575477][ T4936] [ 55.577780][ T4936] read to 0xffff88811a02bb04 of 4 bytes by task 4936 on cpu 1: [ 55.585296][ T4936] filemap_write_and_wait_range+0xfc/0x340 [ 55.591089][ T4936] filemap_invalidate_pages+0xa4/0x1a0 [ 55.596528][ T4936] kiocb_invalidate_pages+0x6e/0x80 [ 55.601763][ T4936] __iomap_dio_rw+0x5d4/0x1250 [ 55.606514][ T4936] iomap_dio_rw+0x40/0x90 [ 55.610821][ T4936] ext4_file_write_iter+0xad9/0xf00 [ 55.616006][ T4936] iter_file_splice_write+0x663/0xa60 [ 55.621359][ T4936] direct_splice_actor+0x153/0x2a0 [ 55.626470][ T4936] splice_direct_to_actor+0x30f/0x680 [ 55.631831][ T4936] do_splice_direct+0xda/0x150 [ 55.636572][ T4936] do_sendfile+0x380/0x650 [ 55.640970][ T4936] __x64_sys_sendfile64+0x105/0x150 [ 55.646149][ T4936] x64_sys_call+0x2bb0/0x2ff0 [ 55.650806][ T4936] do_syscall_64+0xd2/0x200 [ 55.655299][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.661168][ T4936] [ 55.663485][ T4936] value changed: 0x0a000021 -> 0x04000021 [ 55.669177][ T4936] [ 55.671477][ T4936] Reported by Kernel Concurrency Sanitizer on: [ 55.677620][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: syz.5.516 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.687319][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.697392][ T4936] ================================================================== [ 55.981149][ T4936] ================================================================== [ 55.989242][ T4936] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 55.996626][ T4936] [ 55.998944][ T4936] write to 0xffff88811a02bb04 of 4 bytes by task 4929 on cpu 0: [ 56.006559][ T4936] xas_set_mark+0x12b/0x140 [ 56.011071][ T4936] __folio_start_writeback+0x1dd/0x440 [ 56.016540][ T4936] ext4_bio_write_folio+0x5ad/0x9f0 [ 56.021740][ T4936] mpage_process_page_bufs+0x4a1/0x620 [ 56.027292][ T4936] mpage_prepare_extent_to_map+0x786/0xc00 [ 56.033092][ T4936] ext4_do_writepages+0xa05/0x2750 [ 56.038205][ T4936] ext4_writepages+0x176/0x300 [ 56.042956][ T4936] do_writepages+0x1c6/0x310 [ 56.047539][ T4936] filemap_write_and_wait_range+0x144/0x340 [ 56.053428][ T4936] ext4_file_write_iter+0xe04/0xf00 [ 56.058624][ T4936] iter_file_splice_write+0x663/0xa60 [ 56.063983][ T4936] direct_splice_actor+0x153/0x2a0 [ 56.069083][ T4936] splice_direct_to_actor+0x30f/0x680 [ 56.074437][ T4936] do_splice_direct+0xda/0x150 [ 56.079185][ T4936] do_sendfile+0x380/0x650 [ 56.083597][ T4936] __x64_sys_sendfile64+0x105/0x150 [ 56.088789][ T4936] x64_sys_call+0x2bb0/0x2ff0 [ 56.093453][ T4936] do_syscall_64+0xd2/0x200 [ 56.097955][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.103835][ T4936] [ 56.106142][ T4936] read to 0xffff88811a02bb04 of 4 bytes by task 4936 on cpu 1: [ 56.113664][ T4936] ext4_do_writepages+0xf6/0x2750 [ 56.118684][ T4936] ext4_writepages+0x176/0x300 [ 56.123431][ T4936] do_writepages+0x1c6/0x310 [ 56.128011][ T4936] file_write_and_wait_range+0x156/0x2c0 [ 56.133725][ T4936] generic_buffers_fsync_noflush+0x45/0x120 [ 56.139616][ T4936] ext4_sync_file+0x1ab/0x690 [ 56.144281][ T4936] vfs_fsync_range+0x10d/0x130 [ 56.149035][ T4936] ext4_buffered_write_iter+0x34f/0x3c0 [ 56.154579][ T4936] ext4_file_write_iter+0xdbf/0xf00 [ 56.159775][ T4936] iter_file_splice_write+0x663/0xa60 [ 56.165133][ T4936] direct_splice_actor+0x153/0x2a0 [ 56.170228][ T4936] splice_direct_to_actor+0x30f/0x680 [ 56.175582][ T4936] do_splice_direct+0xda/0x150 [ 56.180330][ T4936] do_sendfile+0x380/0x650 [ 56.184741][ T4936] __x64_sys_sendfile64+0x105/0x150 [ 56.189930][ T4936] x64_sys_call+0x2bb0/0x2ff0 [ 56.194599][ T4936] do_syscall_64+0xd2/0x200 [ 56.199096][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.204977][ T4936] [ 56.207283][ T4936] value changed: 0x0a000021 -> 0x04000021 [ 56.212978][ T4936] [ 56.215282][ T4936] Reported by Kernel Concurrency Sanitizer on: [ 56.221498][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: syz.5.516 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.231115][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.241160][ T4936] ================================================================== [ 56.325759][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.