last executing test programs: 3m11.762290913s ago: executing program 32 (id=73): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) 3m11.456308859s ago: executing program 33 (id=88): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) 2m59.277822435s ago: executing program 34 (id=307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0xc884, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 2m59.258604726s ago: executing program 35 (id=319): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m58.373706953s ago: executing program 36 (id=323): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x8, 0x10a, &(0x7f0000000500)=""/266, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) io_submit(0x0, 0x6, &(0x7f0000000e40)=[0xfffffffffffffffe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f00000008c0)="d40d5fd4a285e23b4479705d33a531e6030accc711fe9939491654846473b5409b52c7d6711a75204be73b72ce03f523d9e8b706a0f936c4fcd673b8e46b6e2747832c68c1e31481d677a78261afd13e60005427e21dc72dca6c8e44b6e66304065386e99b4346b8d9f6812b00e16dbac9496cc7d10c68162c7559c1b7cde02770ea0efce40794924974aa9b3db8cfb5568c27bcd1d28ff39b993a3d22e6c74a2af2283ceb054e4efde16dfda04c1c567d9773df65325e60a914571b11f72d83dfc4d68a549c2853044be43a092b7c00fcdf096499ed533985846d2d3050f66bab928d208cddbeab2e1b2917eaf60f7e6741c1", 0xf3, 0x2, 0x0, 0x2, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000009c0)="ac4ae7473446ef33fc40698900d96974d79963562981c72b6bd659c984e6e7442f7faad8f41d02bfade39a76806064656588640004e73a5d360677a188772f1480b86f62ba2ba69a9b7ac84a932866a1e928a16524d4", 0x56, 0x4, 0x0, 0x2, r2}, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000000c80)="9b2862bb9994e10b7241e5698a564750a0f3e10bdd1a2c6ade74374a85a8eea8a25f6be3047464ee3ff1e89ae46ade8159d4f5256852390e6a5bde12f2361800238369676d2d16297af4c996", 0x4c, 0x7f, 0x0, 0x2, r2}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, &(0x7f0000001380)="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", 0x3fc, 0x4}]) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x3, 0x80000001, 0x43, @empty, @private1, 0x7800, 0x7, 0x1, 0x101}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000000004d1508a00b55188fa9a9050009d6fb4448bea175cd9e5b7067aef21eb6fed69f911bc00002000000000000159b", @ANYRES16=r4, @ANYBLOB="04002dbd7000fedbdf2501000000080008007f000001050002000a00000008000600ac1e0101060001004e24000006000a000800000008000b00", @ANYRES32=r5, @ANYBLOB="08000800e00000020400050006000a004e2000000500020002000000"], 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="4eaa00000000000071106f00000000009500000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) 2m8.033844599s ago: executing program 37 (id=1558): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ff8}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000001280)={0x10, 0x0, "b45eada312c17f2da7c39fa17b673a74"}) socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) futex_waitv(&(0x7f00000003c0)=[{0x4, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000480)={0x77359400}, 0x0) 1m49.690083454s ago: executing program 38 (id=1871): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fbb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) capget(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m33.277045872s ago: executing program 7 (id=2360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 1m33.256243912s ago: executing program 7 (id=2361): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$eJzs3d9rW+UbAPDnpE33+7sOxvgqIoVdOJlL19YfE7yYl6LDgd7P0mZlNFlGk461Dtwu3I03MgQRB8Nr9d7L4T/gXzHQwZBRFPEmctKTmK3JmnXZmprPB872vjkne8+T9zzv3jcnIQEMrYn0j1zECxHxZRJxsG3faGQ7J9aPW3twdS7dkqjXP/o9iSR7rHl8kv29L6v8PyJ+/jzieG5ju9WV1cXZUqm4lNUna+VLk9WV1RMXyrMLxYXixemZmVNvzEy//dabfYv11bN/fvPhnfdOfXF07esf7x26mcTp2J/ta4/jKVxrr0zERPaa5OP0IwdO9aGxQZJs9wmwJSNZnucjHQMOxkiW9cB/32cRUQeGVCL/YUg15wHNtX2f1sE7xv131xdAG+MfXX9vJHY31kZ715KHVkbpene8D+2nbfz0262b6Rb9ex8CYFPXrkfEydHRjeNfko1/W3eyh2MebcP4B8/PnXT+81qn+U+uNf+JDvOffR1ydys2z//cvT4001U6/3un4/y3ddNqfCSrHWjM+fLJ+QulYjq2/S8ijkV+V1p/3P2cU2t36932tc//0i1tvzkXzM7j3uiuh58zP1ubfZqY292/HvFix/lv0ur/pEP/p6/H2R7bOFK89XK3fZvH/2zVv4t4pWP/51vHJI+/PznZuB4mm1fFRn/cOPJLt/a3O/60//eux/9XtiRs9X9mPGm/X1t98jZu7/672G3fVq//seTjRnkse+zKbK22NBUxlnyw8fHpf5/brDePT+M/dvTx41+n639PRHzSY/w3Dv/w0tbjf7bS+Oc7Xv/d+v/JC3ff//Tbzq3f7rH/X4+k7QZzL+Nfryf4VC8eAAAAAAAADJhcROyPJFdolXO5QmH98x2HY2+uVKnWjp+vLF+cj8Z3Zccjn2ve6T7Y9nmIqezzsM369CP1mYg4FBFfjexp1AtzldL8dgcPAAAAAAAAAAAAAAAAAAAAA2Jfl+//p34d2e6zA545P/kNw2vT/O/HLz0BA8n//zC85D8ML/kPw0v+w/CS/zC85D8ML/kPw0v+AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dPXMm3eprD67OpfX5yyvLi5XLJ+aL1cVCeXmuMFdZulRYqFQWSsXCXKW82b9XqlQuTU3H8pXJWrFam6yurJ4rV5Yv1s5dKH9/IKKYfy5RAQAAAAAAAAAAAAAAAAAAwM5SXVldnC2ViksKjcKuGIjT2EGF0cE4DYU+FzoMFmPbMEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQET8EwAA//+ndDnV") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, 0x0, 0x0, 0x7ffd, 0xffffffff, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) 1m33.177530834s ago: executing program 7 (id=2364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000800850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r1, 0x0, 0x800000009) 1m32.951046509s ago: executing program 7 (id=2376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 1m32.87819002s ago: executing program 7 (id=2381): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x17, 0x20}, 0x20) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf) 1m32.774185792s ago: executing program 7 (id=2389): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1m32.739365013s ago: executing program 39 (id=2389): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1m26.282711658s ago: executing program 4 (id=2608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000001040)='kfree\x00', r1, 0x0, 0x9}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1m26.18944629s ago: executing program 4 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000140), &(0x7f0000000200)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 1m26.141197161s ago: executing program 4 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 1m26.107940481s ago: executing program 4 (id=2623): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4010) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m26.066572112s ago: executing program 4 (id=2625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 1m25.874522306s ago: executing program 4 (id=2631): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) 1m25.840449816s ago: executing program 40 (id=2631): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) 1m8.717129548s ago: executing program 0 (id=3098): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x48041) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m8.701020088s ago: executing program 0 (id=3099): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) r2 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r2, 0x402, 0x4) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) open$dir(&(0x7f0000000100)='./file0\x00', 0x1c9a41, 0x184) 1m8.689047409s ago: executing program 0 (id=3100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.677095619s ago: executing program 0 (id=3101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r2, 0x2) socket$nl_route(0x10, 0x3, 0x0) 1m7.822084686s ago: executing program 0 (id=3129): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 1m7.756278067s ago: executing program 0 (id=3130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040040053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 52.67182998s ago: executing program 41 (id=3130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040040053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 45.741305114s ago: executing program 3 (id=3664): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0xc4}, 0x20004009) 44.230985773s ago: executing program 3 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 44.212585673s ago: executing program 3 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 44.147381504s ago: executing program 3 (id=3711): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") 44.123150865s ago: executing program 3 (id=3712): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 43.809960601s ago: executing program 3 (id=3718): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) 43.809718011s ago: executing program 42 (id=3718): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) 41.054222815s ago: executing program 5 (id=3796): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) 40.918125207s ago: executing program 5 (id=3803): setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 40.880072647s ago: executing program 5 (id=3805): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) 40.78913475s ago: executing program 5 (id=3811): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 40.001620595s ago: executing program 5 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 37.814203127s ago: executing program 5 (id=3892): r0 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xb0f2, 0x0, 0x3, 0x60000002}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000005c0)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 37.814027677s ago: executing program 43 (id=3892): r0 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xb0f2, 0x0, 0x3, 0x60000002}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000005c0)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.385287074s ago: executing program 8 (id=4732): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @local, 0x8}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)}], 0x1}, 0x808c5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = dup(r1) read$char_usb(r2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004080), 0x0, 0x20040140) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000180)="f7", 0x1, 0x200980) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 3.248166857s ago: executing program 8 (id=4734): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 1.785980705s ago: executing program 1 (id=4770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000005e821b041b8b7e2000000f4ff00", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="fc4f5f2ffb4340837fc53ba928cf8eb96a93bf74d7a27715cdcea4721f098821c92ffc1a6707c3b98c96f388f414058530b2d13c8ff6e4fb90a07b2ae468898bc23f7c5e872da382ee0b524ef31f4bc937a3414bd96d332532a84854276367a64b7af0519985d53ae6e684508b7361066c431091b6a124169bd5520473233656bbd96ae26d94a425d9fdcb0202d8f0cd2286544c618a2521f6a1e897478650f4d41326367ef75035c4c672836f19931f5e8dda17cda1286651e1a85717801eb9b819a18cb265fbb423390a2803ad1bb8902fb26be9f8c2a00b174771865f8789edbcff0cdfe7bcc4a135b29ee088", @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.726175827s ago: executing program 1 (id=4771): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0xfd1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.619431729s ago: executing program 9 (id=4773): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$packet(0x11, 0xa, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='size=[']) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.512505651s ago: executing program 1 (id=4777): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x23}}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x403}}, {@journal_async_commit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.445122672s ago: executing program 1 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000005, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 1.205254207s ago: executing program 2 (id=4787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.202194297s ago: executing program 1 (id=4788): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1.101077599s ago: executing program 2 (id=4789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.070295469s ago: executing program 6 (id=4790): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc2f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.056928379s ago: executing program 9 (id=4791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) 1.00619449s ago: executing program 2 (id=4792): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') unshare(0x20000400) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0x12c}, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) writev(r1, &(0x7f0000000500)=[{0x0}], 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) 1.005900691s ago: executing program 2 (id=4793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 999.085431ms ago: executing program 6 (id=4794): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 958.925472ms ago: executing program 9 (id=4795): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = dup(0xffffffffffffffff) fsetxattr$security_selinux(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x30, r0}, 0x10) 914.241402ms ago: executing program 6 (id=4796): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0xe, 0x39, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x31, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0) 893.863823ms ago: executing program 6 (id=4797): syz_io_uring_setup(0x4b5, 0x0, &(0x7f0000010080), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) 891.893043ms ago: executing program 9 (id=4798): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 872.776683ms ago: executing program 2 (id=4799): pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8854}, 0x24000040) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 818.287594ms ago: executing program 9 (id=4800): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xffffffffffffff08) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @loopback, 0x2}, 0x1c) 741.596856ms ago: executing program 2 (id=4801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 649.424678ms ago: executing program 6 (id=4802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0||!') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x50) r4 = syz_open_procfs(0x0, 0x0) close(r4) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x81) 562.271779ms ago: executing program 6 (id=4803): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r5, r4, 0x0, 0x3ffff) 316.487704ms ago: executing program 1 (id=4804): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @loopback, 0xc5f}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 245.894125ms ago: executing program 8 (id=4805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 126.305988ms ago: executing program 8 (id=4806): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 111.337638ms ago: executing program 8 (id=4807): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 47.288869ms ago: executing program 8 (id=4808): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) 0s ago: executing program 9 (id=4809): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): rface: batadv_slave_1 [ 136.159229][ T12] veth1_macvtap: left promiscuous mode [ 136.164826][ T12] veth0_macvtap: left promiscuous mode [ 136.170619][ T12] veth1_vlan: left promiscuous mode [ 136.175923][ T12] veth0_vlan: left promiscuous mode [ 136.325280][ T12] team0 (unregistering): Port device team_slave_1 removed [ 136.335775][ T12] team0 (unregistering): Port device team_slave_0 removed [ 136.410976][T10614] pimreg: entered allmulticast mode [ 136.468844][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.476048][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.493972][T10576] bridge_slave_0: entered allmulticast mode [ 136.502537][T10576] bridge_slave_0: entered promiscuous mode [ 136.510894][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.518758][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.526190][T10576] bridge_slave_1: entered allmulticast mode [ 136.533552][T10576] bridge_slave_1: entered promiscuous mode [ 136.553486][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.564202][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.585616][T10576] team0: Port device team_slave_0 added [ 136.592228][T10576] team0: Port device team_slave_1 added [ 136.611035][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.618053][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.644294][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.657137][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.664220][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.690292][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.744412][T10576] hsr_slave_0: entered promiscuous mode [ 136.760840][T10576] hsr_slave_1: entered promiscuous mode [ 136.778830][T10576] debugfs: 'hsr0' already exists in 'hsr' [ 136.785327][T10576] Cannot create hsr debugfs directory [ 137.084538][T10576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.095050][T10576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.108930][T10576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.118408][T10576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.160219][T10576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.176085][T10576] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.186326][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.193424][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.205019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.212263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.240727][T10576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.251143][T10576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.341607][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.499817][T10576] veth0_vlan: entered promiscuous mode [ 137.513897][T10576] veth1_vlan: entered promiscuous mode [ 137.548452][T10576] veth0_macvtap: entered promiscuous mode [ 137.567935][T10576] veth1_macvtap: entered promiscuous mode [ 137.589446][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.606929][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.625758][ T4209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.644030][ T4209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.662240][ T4209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.680576][ T4209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.074797][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 140.074852][ T29] audit: type=1326 audit(1758693489.666:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.9.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 140.111599][ T29] audit: type=1326 audit(1758693489.666:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.9.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 140.199335][ T29] audit: type=1326 audit(1758693489.736:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.9.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 140.224073][ T29] audit: type=1326 audit(1758693489.736:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.9.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 140.247678][ T29] audit: type=1326 audit(1758693489.736:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.9.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 140.289719][T10923] netlink: 'syz.3.2711': attribute type 12 has an invalid length. [ 140.402044][T10944] : renamed from bond0 (while UP) [ 140.492427][ T29] audit: type=1400 audit(1758693490.076:6549): avc: denied { bind } for pid=10959 comm="syz.2.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.513799][ T29] audit: type=1400 audit(1758693490.076:6550): avc: denied { setopt } for pid=10959 comm="syz.2.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.535972][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 140.541907][ T29] audit: type=1400 audit(1758693490.076:6551): avc: denied { map } for pid=10962 comm="syz.3.2730" path="socket:[31210]" dev="sockfs" ino=31210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 140.546786][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 140.618970][T10965] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 140.634981][T10965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.648909][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2731'. [ 140.680333][T10965] bond1 (unregistering): Released all slaves [ 140.808110][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 140.838858][ T29] audit: type=1326 audit(1758693490.426:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.9.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 140.886528][ T29] audit: type=1326 audit(1758693490.456:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.9.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 142.412340][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2795'. [ 142.554251][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2814'. [ 142.966474][T11170] netlink: 'syz.9.2821': attribute type 7 has an invalid length. [ 142.974460][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2821'. [ 143.112197][T11187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2830'. [ 143.121377][T11187] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2830'. [ 143.259195][T11201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.281038][T11204] wg2: entered promiscuous mode [ 143.286096][T11204] wg2: entered allmulticast mode [ 143.341002][T11201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.367235][T11213] sctp: [Deprecated]: syz.9.2840 (pid 11213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.367235][T11213] Use struct sctp_sack_info instead [ 143.418896][T11201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.457297][T11201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.563313][ T1780] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.634543][ T1780] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.683294][ T1780] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.738084][ T1780] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.810875][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2856'. [ 143.838411][T11229] Set syz1 is full, maxelem 65536 reached [ 144.656954][T11342] infiniband syz!: set down [ 144.661715][T11342] infiniband syz!: added team_slave_0 [ 144.675281][T11342] RDS/IB: syz!: added [ 144.679596][T11342] smc: adding ib device syz! with port count 1 [ 144.688300][T11342] smc: ib device syz! port 1 has pnetid [ 145.025797][T11348] syzkaller0: entered allmulticast mode [ 145.038324][T11348] syzkaller0 (unregistering): left allmulticast mode [ 145.144185][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 145.144197][ T29] audit: type=1326 audit(1758693494.736:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 145.186340][ T29] audit: type=1326 audit(1758693494.766:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 145.209921][ T29] audit: type=1326 audit(1758693494.766:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 145.242162][T11362] team1: entered promiscuous mode [ 145.247239][T11362] team1: entered allmulticast mode [ 145.522834][ T29] audit: type=1326 audit(1758693495.096:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 145.546960][ T29] audit: type=1326 audit(1758693495.096:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 145.570609][ T29] audit: type=1326 audit(1758693495.096:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 145.594723][ T29] audit: type=1326 audit(1758693495.096:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24546fef03 code=0x7ffc0000 [ 145.618250][ T29] audit: type=1326 audit(1758693495.096:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24546fef03 code=0x7ffc0000 [ 145.642301][ T29] audit: type=1326 audit(1758693495.096:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 145.667282][ T29] audit: type=1326 audit(1758693495.096:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.9.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 145.865076][T11431] netlink: 'syz.9.2934': attribute type 10 has an invalid length. [ 145.877789][T11431] : (slave netdevsim1): Enslaving as an active interface with an up link [ 145.894045][T11431] __nla_validate_parse: 4 callbacks suppressed [ 145.894059][T11431] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2934'. [ 146.085354][T11443] batadv_slave_1: entered promiscuous mode [ 146.127828][T11443] batadv_slave_1: left promiscuous mode [ 146.395064][T11454] vlan2: entered allmulticast mode [ 146.400277][T11454] batadv0: entered allmulticast mode [ 146.914118][T11452] syz_tun: entered allmulticast mode [ 147.236611][T11486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.243865][T11486] IPv6: NLM_F_CREATE should be set when creating new route [ 147.688565][T11519] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2974'. [ 147.744816][T11519] batadv1: entered promiscuous mode [ 147.750087][T11519] batadv1: entered allmulticast mode [ 147.816031][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2977'. [ 148.761850][T11598] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3007'. [ 148.773549][T11598] C: renamed from team_slave_0 [ 149.835807][T11628] 9pnet_fd: Insufficient options for proto=fd [ 150.095302][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3023'. [ 150.118295][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3024'. [ 150.141055][T11647] block device autoloading is deprecated and will be removed. [ 150.189215][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3024'. [ 150.307342][T11660] bond_slave_1: mtu less than device minimum [ 150.376848][T11674] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.3038'. [ 150.422569][T11683] ip6tnl0: entered promiscuous mode [ 150.427892][T11683] ip6tnl0: entered allmulticast mode [ 150.576026][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 150.576040][ T29] audit: type=1326 audit(1758693500.166:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.612866][ T29] audit: type=1326 audit(1758693500.196:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.636987][ T29] audit: type=1326 audit(1758693500.196:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.660595][ T29] audit: type=1326 audit(1758693500.196:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.684724][ T29] audit: type=1326 audit(1758693500.196:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.708417][ T29] audit: type=1326 audit(1758693500.196:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.732768][ T29] audit: type=1326 audit(1758693500.196:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.757035][ T29] audit: type=1326 audit(1758693500.196:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.780683][ T29] audit: type=1326 audit(1758693500.196:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 150.804847][ T29] audit: type=1326 audit(1758693500.196:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.2.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 151.145562][T11728] wg2: entered promiscuous mode [ 151.150462][T11728] wg2: entered allmulticast mode [ 151.335039][T11751] bond_slave_1: mtu less than device minimum [ 151.378308][T11755] netlink: 'syz.2.3071': attribute type 1 has an invalid length. [ 151.395035][T11755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.430884][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3071'. [ 151.460752][T11755] bond1 (unregistering): Released all slaves [ 151.843947][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3086'. [ 151.854828][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3086'. [ 151.994977][T11800] bond_slave_1: mtu less than device minimum [ 152.919283][T11843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11843 comm=syz.9.3109 [ 152.944160][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3109'. [ 153.007256][T11854] netlink: 'syz.3.3111': attribute type 7 has an invalid length. [ 153.015753][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 153.130275][T11834] syz_tun: entered allmulticast mode [ 153.716978][T11915] IPv4: Oversized IP packet from 127.202.26.0 [ 154.130775][T11939] macvlan1: entered promiscuous mode [ 154.146845][T11939] ipvlan0: entered promiscuous mode [ 154.166544][T11939] ipvlan0: left promiscuous mode [ 154.194224][T11939] macvlan1: left promiscuous mode [ 154.324261][T11955] netlink: 664 bytes leftover after parsing attributes in process `syz.3.3152'. [ 155.271647][T11980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3162'. [ 155.587165][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 155.587180][ T29] audit: type=1326 audit(1758693505.176:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.642037][ T29] audit: type=1326 audit(1758693505.206:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.666185][ T29] audit: type=1326 audit(1758693505.216:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.689749][ T29] audit: type=1326 audit(1758693505.226:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.731711][T11984] syz_tun: entered allmulticast mode [ 155.787249][ T29] audit: type=1326 audit(1758693505.236:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.810868][ T29] audit: type=1326 audit(1758693505.246:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.835345][ T29] audit: type=1326 audit(1758693505.256:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.858941][ T29] audit: type=1326 audit(1758693505.266:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.883096][ T29] audit: type=1326 audit(1758693505.276:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.906640][ T29] audit: type=1326 audit(1758693505.286:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 155.976197][T11996] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3167'. [ 155.994246][T11996] C: renamed from team_slave_0 [ 156.179306][ T1096] kernel write not supported for file bpf-prog (pid: 1096 comm: kworker/0:2) [ 156.347524][T12026] bond0: (slave bond_slave_0): Releasing backup interface [ 156.365395][T12035] netlink: 'syz.3.3182': attribute type 10 has an invalid length. [ 156.374213][T12026] bond0: (slave bond_slave_1): Releasing backup interface [ 156.404774][T12026] team0: Port device team_slave_0 removed [ 156.415900][T12026] team0: Port device team_slave_1 removed [ 156.422214][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3182'. [ 156.432435][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.440054][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.450704][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.458134][T12026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.501838][T12030] tipc: Enabling of bearer rejected, failed to enable media [ 156.550412][T12035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.578068][T12035] team0: Port device bond0 added [ 156.625244][T12039] team0 (unregistering): Port device bond0 removed [ 156.666108][T12042] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.737912][T12049] ref_ctr increment failed for inode: 0x735 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811ad78000 [ 156.797433][T12048] uprobe: syz.2.3188:12048 failed to unregister, leaking uprobe [ 157.269818][T12065] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3195'. [ 157.493149][T12092] syz_tun: entered allmulticast mode [ 157.506144][T12091] syz_tun: left allmulticast mode [ 157.655778][T12110] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3217'. [ 157.740604][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3221'. [ 157.782809][T12120] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3221'. [ 157.958660][T12151] 9pnet_fd: Insufficient options for proto=fd [ 158.440432][T12176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3247'. [ 159.617909][T12242] : (slave dummy0): Releasing backup interface [ 159.641470][T12243] netlink: 'syz.9.3273': attribute type 10 has an invalid length. [ 159.651770][T12242] : (slave bond_slave_0): Releasing backup interface [ 159.679069][T12242] : (slave bond_slave_1): Releasing backup interface [ 159.695730][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3273'. [ 159.705106][T12242] team0: Port device C removed [ 159.718488][T12242] team0: Port device team_slave_1 removed [ 159.738944][T12242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.766137][T12242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.784063][T12242] : (slave netdevsim1): Releasing backup interface [ 159.802083][T12243] 8021q: adding VLAN 0 to HW filter on device  [ 159.818610][T12243] team0: Port device  added [ 159.836720][T12246] team0 (unregistering): Port device  removed [ 159.858597][T12249] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3275'. [ 159.951013][T12261] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 160.492298][T12290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12290 comm=syz.8.3289 [ 160.634017][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 160.664890][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 160.859789][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 160.859803][ T29] audit: type=1326 audit(1758693510.446:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe929a25d67 code=0x0 [ 160.943616][ T29] audit: type=1326 audit(1758693510.536:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24546f5d67 code=0x7ffc0000 [ 160.985565][ T29] audit: type=1326 audit(1758693510.566:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245469af79 code=0x7ffc0000 [ 161.009293][ T29] audit: type=1326 audit(1758693510.566:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 161.032307][ T29] audit: type=1326 audit(1758693510.566:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 161.126652][ T29] audit: type=1400 audit(1758693510.716:7380): avc: denied { read } for pid=12317 comm="syz.8.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.150209][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3298'. [ 162.100306][T12311] syz.3.3297 (12311) used greatest stack depth: 6360 bytes left [ 162.279293][ T29] audit: type=1326 audit(1758693511.866:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cc67eec9 code=0x7ffc0000 [ 162.303528][ T29] audit: type=1326 audit(1758693511.866:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cc67eec9 code=0x7ffc0000 [ 162.327095][ T29] audit: type=1326 audit(1758693511.866:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cc67eec9 code=0x7ffc0000 [ 162.351312][ T29] audit: type=1326 audit(1758693511.866:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62cc67eec9 code=0x7ffc0000 [ 162.376321][ T9] hid_parser_main: 29 callbacks suppressed [ 162.376371][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 162.454117][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.662832][T12331] Set syz1 is full, maxelem 65536 reached [ 162.812250][T12362] bridge_slave_0: left allmulticast mode [ 162.818053][T12362] bridge_slave_0: left promiscuous mode [ 162.824121][T12362] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.839590][T12362] bridge_slave_1: left allmulticast mode [ 162.845338][T12362] bridge_slave_1: left promiscuous mode [ 162.850985][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.874481][T12369] netlink: 'syz.2.3316': attribute type 10 has an invalid length. [ 162.894326][T12362] bond0: (slave bond_slave_0): Releasing backup interface [ 162.915203][T12362] bond0: (slave bond_slave_1): Releasing backup interface [ 162.926744][T12362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.933131][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'. [ 162.934269][T12362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.981253][T12362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.988731][T12362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.026712][T12378] bridge: RTM_NEWNEIGH with invalid ether address [ 163.413648][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3336'. [ 163.681626][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3344'. [ 163.787946][T12442] netlink: 'syz.9.3351': attribute type 4 has an invalid length. [ 164.065846][T12466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3363'. [ 164.335988][T12486] netlink: 'syz.9.3371': attribute type 1 has an invalid length. [ 164.365937][T12486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.390677][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3371'. [ 164.408784][T12486] bond1 (unregistering): Released all slaves [ 165.489089][T12538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3394'. [ 165.735244][T12545] tipc: Enabling of bearer rejected, failed to enable media [ 165.856855][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3399'. [ 166.249024][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 166.249039][ T29] audit: type=1326 audit(1758693515.836:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24546f5d67 code=0x7ffc0000 [ 166.337189][ T29] audit: type=1326 audit(1758693515.836:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245469af79 code=0x7ffc0000 [ 166.360768][ T29] audit: type=1326 audit(1758693515.836:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24546f5d67 code=0x7ffc0000 [ 166.384285][ T29] audit: type=1326 audit(1758693515.836:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245469af79 code=0x7ffc0000 [ 166.407883][ T29] audit: type=1326 audit(1758693515.836:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 166.431559][ T29] audit: type=1326 audit(1758693515.836:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 166.455266][ T29] audit: type=1326 audit(1758693515.836:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24546f5d67 code=0x7ffc0000 [ 166.478938][ T29] audit: type=1326 audit(1758693515.836:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245469af79 code=0x7ffc0000 [ 166.502507][ T29] audit: type=1326 audit(1758693515.836:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 166.526045][ T29] audit: type=1326 audit(1758693515.836:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.9.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 166.572969][T12589] tls_set_device_offload_rx: netdev not found [ 166.640361][T12594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12594 comm=syz.8.3417 [ 168.121379][T12674] raw_sendmsg: syz.9.3453 forgot to set AF_INET. Fix it! [ 168.441903][T12711] siw: device registration error -23 [ 168.465969][T12715] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3472'. [ 168.499987][T12715] bond2: entered promiscuous mode [ 168.505190][T12715] bond2: entered allmulticast mode [ 168.511229][T12715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.540822][T12715] bond2 (unregistering): Released all slaves [ 168.811674][ T4263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.830310][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3487'. [ 168.858159][T12760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.869405][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3487'. [ 168.885976][ T4263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.903218][T12760] bond1 (unregistering): Released all slaves [ 168.938478][ T4263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.008187][ T4263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.112369][T12727] chnl_net:caif_netlink_parms(): no params data found [ 169.160987][T12772] mmap: syz.3.3492 (12772) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.178619][T12798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3503'. [ 169.251399][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.258763][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.270996][T12727] bridge_slave_0: entered allmulticast mode [ 169.278588][T12727] bridge_slave_0: entered promiscuous mode [ 169.310306][ T4263] bridge_slave_1: left allmulticast mode [ 169.316083][ T4263] bridge_slave_1: left promiscuous mode [ 169.321730][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.329978][ T4263] bridge_slave_0: left allmulticast mode [ 169.336459][ T4263] bridge_slave_0: left promiscuous mode [ 169.342170][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.418990][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.429251][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.438693][ T4263] bond0 (unregistering): Released all slaves [ 169.446251][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.453433][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.460579][T12727] bridge_slave_1: entered allmulticast mode [ 169.467297][T12727] bridge_slave_1: entered promiscuous mode [ 169.493273][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.523762][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.541919][ T4263] hsr_slave_0: left promiscuous mode [ 169.550426][ T4263] hsr_slave_1: left promiscuous mode [ 169.556317][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.563748][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.571643][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.579111][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.593095][ T4263] veth1_macvtap: left promiscuous mode [ 169.598636][ T4263] veth0_macvtap: left promiscuous mode [ 169.604669][ T4263] veth1_vlan: left promiscuous mode [ 169.610159][ T4263] veth0_vlan: left promiscuous mode [ 169.677344][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 169.686790][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 169.733871][T12727] team0: Port device team_slave_0 added [ 169.745258][T12727] team0: Port device team_slave_1 added [ 169.777409][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.784405][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.811023][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.852385][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.859391][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.886000][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.937739][T12727] hsr_slave_0: entered promiscuous mode [ 169.945096][T12727] hsr_slave_1: entered promiscuous mode [ 169.951055][T12727] debugfs: 'hsr0' already exists in 'hsr' [ 169.956890][T12727] Cannot create hsr debugfs directory [ 170.028527][T12727] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.089178][T12727] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.125290][T12839] bridge0: port 3(ip6gretap0) entered blocking state [ 170.132024][T12839] bridge0: port 3(ip6gretap0) entered disabled state [ 170.139158][T12839] ip6gretap0: entered allmulticast mode [ 170.153600][T12839] ip6gretap0: entered promiscuous mode [ 170.166193][T12727] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.261897][T12727] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.335841][T12727] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 170.345751][T12727] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.355003][T12727] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.366657][T12727] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.436929][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.454910][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.466846][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.473946][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.495132][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.502275][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.556455][T12866] netlink: 'syz.3.3526': attribute type 3 has an invalid length. [ 170.580682][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.652114][T12878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3528'. [ 170.671300][T12878] bond1: entered promiscuous mode [ 170.676486][T12878] bond1: entered allmulticast mode [ 170.681898][T12878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.696537][T12878] bond1 (unregistering): Released all slaves [ 170.787165][T12727] veth0_vlan: entered promiscuous mode [ 170.796361][T12727] veth1_vlan: entered promiscuous mode [ 170.819171][T12727] veth0_macvtap: entered promiscuous mode [ 170.827568][T12727] veth1_macvtap: entered promiscuous mode [ 170.844152][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.855118][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.870052][ T4231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.885163][ T4246] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.896428][ T4246] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.926865][ T4245] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.934428][T12904] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3535'. [ 171.192682][T12931] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3544'. [ 171.755786][T12957] openvswitch: netlink: Message has 6 unknown bytes. [ 171.881792][T12972] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3561'. [ 171.899258][T12967] infiniband !yz!: set down [ 171.903871][T12967] infiniband !yz!: added team_slave_0 [ 171.917871][T12972] bond1: entered promiscuous mode [ 171.923094][T12972] bond1: entered allmulticast mode [ 171.933672][T12972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.955549][T12967] RDS/IB: !yz!: added [ 171.959843][T12967] smc: adding ib device !yz! with port count 1 [ 171.969238][T12972] bond1 (unregistering): Released all slaves [ 171.975448][T12967] smc: ib device !yz! port 1 has pnetid [ 171.996491][T12982] wg2: left promiscuous mode [ 172.001119][T12982] wg2: left allmulticast mode [ 172.032305][T12982] wg2: entered promiscuous mode [ 172.037317][T12982] wg2: entered allmulticast mode [ 172.251331][T13004] loop6: detected capacity change from 0 to 2048 [ 172.344432][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3577'. [ 172.392414][T13023] bond_slave_1: mtu less than device minimum [ 172.482580][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 172.482593][ T29] audit: type=1400 audit(1758693522.066:7842): avc: denied { watch } for pid=13036 comm="syz.3.3586" path="/file0" dev="ramfs" ino=38021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 172.553717][ T29] audit: type=1400 audit(1758693522.086:7843): avc: denied { execute } for pid=13036 comm="syz.3.3586" name="file0" dev="ramfs" ino=38021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 172.576497][ T29] audit: type=1400 audit(1758693522.086:7844): avc: denied { execute_no_trans } for pid=13036 comm="syz.3.3586" path="/file0" dev="ramfs" ino=38021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 172.842753][T13085] netlink: 'syz.8.3592': attribute type 10 has an invalid length. [ 172.851020][T13085] team0: Device hsr_slave_0 failed to register rx_handler [ 173.098932][ T29] audit: type=1326 audit(1758693522.686:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.125011][ T29] audit: type=1326 audit(1758693522.686:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.157603][ T29] audit: type=1326 audit(1758693522.736:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.181161][ T29] audit: type=1326 audit(1758693522.736:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.207381][ T29] audit: type=1326 audit(1758693522.756:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.231005][ T29] audit: type=1326 audit(1758693522.756:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.255214][ T29] audit: type=1326 audit(1758693522.756:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 173.710884][T13205] netlink: 'syz.9.3620': attribute type 4 has an invalid length. [ 173.719439][T13205] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3620'. [ 173.737439][T13205] .`: renamed from  [ 173.789074][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 173.803777][T13213] team0: entered promiscuous mode [ 173.808937][T13213] team0: entered allmulticast mode [ 174.533544][ T7419] IPVS: starting estimator thread 0... [ 174.622950][T13278] IPVS: using max 2736 ests per chain, 136800 per kthread [ 175.436160][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813a38a800: rx timeout, send abort [ 175.451274][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88813a38a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 176.015705][T13333] wg2: left promiscuous mode [ 176.020549][T13333] wg2: left allmulticast mode [ 176.029278][T13333] wg2: entered promiscuous mode [ 176.034232][T13333] wg2: entered allmulticast mode [ 176.040413][T13335] wg2: entered promiscuous mode [ 176.046128][T13335] wg2: entered allmulticast mode [ 176.077016][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3678'. [ 176.091245][T13339] team1: entered promiscuous mode [ 176.096438][T13339] team1: entered allmulticast mode [ 176.185086][T13347] lo speed is unknown, defaulting to 1000 [ 176.191109][T13347] lo speed is unknown, defaulting to 1000 [ 176.197121][T13347] lo speed is unknown, defaulting to 1000 [ 176.204730][T13347] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.219988][T13347] lo speed is unknown, defaulting to 1000 [ 176.226720][T13347] lo speed is unknown, defaulting to 1000 [ 176.233727][T13347] lo speed is unknown, defaulting to 1000 [ 176.239955][T13347] lo speed is unknown, defaulting to 1000 [ 176.246267][T13347] lo speed is unknown, defaulting to 1000 [ 176.252247][T13347] lo speed is unknown, defaulting to 1000 [ 176.258196][T13347] lo speed is unknown, defaulting to 1000 [ 176.264933][T13347] lo speed is unknown, defaulting to 1000 [ 176.271080][T13347] lo speed is unknown, defaulting to 1000 [ 176.460879][T13361] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 176.482600][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3688'. [ 176.492332][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3688'. [ 176.742586][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3698'. [ 176.751541][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3698'. [ 176.824997][T13401] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 176.837221][T13403] tipc: Enabling of bearer rejected, failed to enable media [ 177.138909][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3713'. [ 177.179939][T13427] loop6: detected capacity change from 0 to 164 [ 177.197346][T13427] bio_check_eod: 32 callbacks suppressed [ 177.197363][T13427] syz.6.3715: attempt to access beyond end of device [ 177.197363][T13427] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 177.219598][T13427] syz.6.3715: attempt to access beyond end of device [ 177.219598][T13427] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 177.615313][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 177.615326][ T29] audit: type=1326 audit(177.592:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.644390][ T29] audit: type=1326 audit(177.592:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.669995][T13435] lo speed is unknown, defaulting to 1000 [ 177.726277][ T29] audit: type=1326 audit(177.652:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.749291][ T29] audit: type=1326 audit(177.652:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.772247][ T29] audit: type=1326 audit(177.652:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.795457][ T29] audit: type=1326 audit(177.652:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.818345][ T29] audit: type=1326 audit(177.652:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.841463][ T29] audit: type=1326 audit(177.652:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.864648][ T29] audit: type=1326 audit(177.652:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 177.866410][T13435] chnl_net:caif_netlink_parms(): no params data found [ 177.887556][ T29] audit: type=1326 audit(177.652:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40b47deec9 code=0x7ffc0000 [ 178.007346][T13435] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.014521][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.033135][T13435] bridge_slave_0: entered allmulticast mode [ 178.039632][T13435] bridge_slave_0: entered promiscuous mode [ 178.053719][T13435] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.061033][T13435] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.068418][T13435] bridge_slave_1: entered allmulticast mode [ 178.074923][T13435] bridge_slave_1: entered promiscuous mode [ 178.126625][T13435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.153877][T13435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.192383][T13435] team0: Port device team_slave_0 added [ 178.199694][T13435] team0: Port device team_slave_1 added [ 178.219847][T13435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.227018][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.253181][T13435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.310997][T13435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.318024][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.344016][T13435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.379299][T13435] hsr_slave_0: entered promiscuous mode [ 178.386195][T13435] hsr_slave_1: entered promiscuous mode [ 178.395216][T13435] debugfs: 'hsr0' already exists in 'hsr' [ 178.400954][T13435] Cannot create hsr debugfs directory [ 178.505331][T13435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.515846][T13435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.618373][T13435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.628821][T13435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.716491][T13435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.726868][T13435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.789886][T13435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.801015][T13435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.875130][T13435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.903670][T13435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.912425][T13435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.933643][T13435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.027895][T13435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.062596][T13435] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.074258][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.081340][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.097451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.104619][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.219307][T13435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.309263][T13561] netlink: 'syz.8.3766': attribute type 1 has an invalid length. [ 179.340899][T13561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.356333][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3766'. [ 179.391773][T13561] bond2 (unregistering): Released all slaves [ 179.442672][T13576] loop6: detected capacity change from 0 to 764 [ 179.445567][T13435] veth0_vlan: entered promiscuous mode [ 179.456137][T13576] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.461177][T13435] veth1_vlan: entered promiscuous mode [ 179.481921][T13435] veth0_macvtap: entered promiscuous mode [ 179.490230][T13435] veth1_macvtap: entered promiscuous mode [ 179.501916][T13435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.521048][T13435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.534352][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.556637][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.577034][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.609054][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.619128][T13585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=13585 comm=syz.5.3731 [ 179.651621][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3774'. [ 179.987698][T13625] loop5: detected capacity change from 0 to 512 [ 179.995029][T13625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.021235][T13625] EXT4-fs (loop5): 1 truncate cleaned up [ 180.029931][T13625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.191861][T13435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.212250][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3797'. [ 180.351225][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3801'. [ 180.463204][T13683] loop5: detected capacity change from 0 to 512 [ 180.484073][T13683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.577026][T13695] mroute: pending queue full, dropping entries [ 180.584525][T13693] pim6reg1: entered promiscuous mode [ 180.589845][T13693] pim6reg1: entered allmulticast mode [ 180.627285][T13694] loop5: detected capacity change from 512 to 0 [ 180.654993][ C0] I/O error, dev loop5, sector 84 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.664603][ C0] buffer_io_error: 18 callbacks suppressed [ 180.664620][ C0] Buffer I/O error on dev loop5, logical block 21, lost sync page write [ 180.682980][T13683] EXT4-fs error (device loop5): ext4_ext_insert_extent:2192: inode #19: block 21: comm syz.5.3811: IO error syncing itable block [ 180.720297][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.729830][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.739390][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 180.747722][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 180.762426][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 180.788621][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.798193][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.807683][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 180.817783][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 180.834429][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 180.851890][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.851989][T13716] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3824'. [ 180.861439][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.861467][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 180.888194][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 180.895176][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 180.909349][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.918872][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.928348][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 180.938597][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 180.946538][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 180.969793][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 180.979359][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 180.990040][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 180.997044][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 181.012765][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 181.021191][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 181.034160][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 181.048225][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 181.065267][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 181.072324][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 181.087765][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 181.096279][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 181.105267][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 181.120077][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 181.128453][T13683] EXT4-fs (loop5): I/O error while writing superblock [ 181.136832][T13724] ref_ctr increment failed for inode: 0xe4 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888119a58b80 [ 181.148251][T13723] uprobe: syz.6.3827:13723 failed to unregister, leaking uprobe [ 181.152778][T13683] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.3811: Error while async write back metadata [ 181.165092][T13726] bridge0: entered promiscuous mode [ 181.175404][T13726] macsec1: entered promiscuous mode [ 181.181074][T13726] bridge0: port 1(macsec1) entered blocking state [ 181.188452][T13726] bridge0: port 1(macsec1) entered disabled state [ 181.196369][T13726] macsec1: entered allmulticast mode [ 181.201704][T13726] bridge0: entered allmulticast mode [ 181.207786][T13726] macsec1: left allmulticast mode [ 181.213670][T13726] bridge0: left allmulticast mode [ 181.219889][T13726] bridge0: left promiscuous mode [ 181.242529][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.256468][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.274624][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.303197][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.318278][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.337968][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.352020][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.368444][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.382147][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.407713][T13435] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 181.505275][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3841'. [ 182.183687][T13777] wg2: left promiscuous mode [ 182.188347][T13777] wg2: left allmulticast mode [ 182.454259][T13783] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 182.471787][T13783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.510560][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'. [ 182.531134][T13783] bond1 (unregistering): Released all slaves [ 182.574007][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3863'. [ 182.671967][T13821] syz_tun: entered allmulticast mode [ 182.692398][T13821] mroute: pending queue full, dropping entries [ 182.699456][T13820] syz_tun: left allmulticast mode [ 182.870822][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3878'. [ 182.930063][T13850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.938716][T13850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.377918][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.438833][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.491395][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.540941][T13894] uprobe: syz.9.3898:13894 failed to unregister, leaking uprobe [ 183.550691][T13894] uprobe: syz.9.3898:13894 failed to unregister, leaking uprobe [ 183.559830][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.641069][ T12] bridge_slave_1: left allmulticast mode [ 183.646803][ T12] bridge_slave_1: left promiscuous mode [ 183.652459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.664058][ T12] bridge_slave_0: left allmulticast mode [ 183.669703][ T12] bridge_slave_0: left promiscuous mode [ 183.675394][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.790905][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.802655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.812247][ T12] bond0 (unregistering): Released all slaves [ 183.820934][T13877] lo speed is unknown, defaulting to 1000 [ 183.951868][ T12] hsr_slave_0: left promiscuous mode [ 183.958054][ T12] hsr_slave_1: left promiscuous mode [ 183.967509][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.975579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.984516][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.991914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.003966][ T12] veth1_macvtap: left promiscuous mode [ 184.009573][ T12] veth0_macvtap: left promiscuous mode [ 184.015170][ T12] veth1_vlan: left promiscuous mode [ 184.020500][ T12] veth0_vlan: left promiscuous mode [ 184.142056][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.156702][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.257890][T13877] chnl_net:caif_netlink_parms(): no params data found [ 184.312512][T13877] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.319636][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.327930][T13877] bridge_slave_0: entered allmulticast mode [ 184.334469][T13877] bridge_slave_0: entered promiscuous mode [ 184.339301][T13927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13927 comm=syz.8.3910 [ 184.341258][T13877] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.359781][T13877] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.367848][T13877] bridge_slave_1: entered allmulticast mode [ 184.378848][T13877] bridge_slave_1: entered promiscuous mode [ 184.398826][T13877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.410789][T13877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.441121][T13877] team0: Port device team_slave_0 added [ 184.449592][T13877] team0: Port device team_slave_1 added [ 184.468646][T13877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.476294][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.502315][T13877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.516235][T13877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.523323][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.549542][T13877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.589365][T13933] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 184.618537][T13877] hsr_slave_0: entered promiscuous mode [ 184.627341][T13877] hsr_slave_1: entered promiscuous mode [ 184.637439][T13877] debugfs: 'hsr0' already exists in 'hsr' [ 184.643223][T13877] Cannot create hsr debugfs directory [ 184.835986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa1d000: rx timeout, send abort [ 184.845031][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aa1d000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.859349][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881524c2400: rx timeout, send abort [ 184.867851][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881524c2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.014401][T13877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.033721][T13877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.045607][T13877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.067159][T13877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.081534][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 185.081546][ T29] audit: type=1400 audit(185.052:8099): avc: denied { create } for pid=13956 comm="syz.6.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 185.179161][ T29] audit: type=1400 audit(185.052:8100): avc: denied { write } for pid=13956 comm="syz.6.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 185.196580][T13877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.198911][ T29] audit: type=1326 audit(185.112:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.228307][ T29] audit: type=1326 audit(185.112:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.251204][ T29] audit: type=1326 audit(185.112:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.258952][T13877] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.274434][ T29] audit: type=1326 audit(185.112:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.274461][ T29] audit: type=1326 audit(185.112:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.274537][ T29] audit: type=1326 audit(185.112:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.274559][ T29] audit: type=1326 audit(185.112:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.274584][ T29] audit: type=1326 audit(185.112:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.6.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8c7deec9 code=0x7ffc0000 [ 185.488778][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.495863][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.505120][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.512319][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.556323][T13877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.566761][T13877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.651048][T13877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.776094][T13877] veth0_vlan: entered promiscuous mode [ 185.784202][T13877] veth1_vlan: entered promiscuous mode [ 185.797400][T13877] veth0_macvtap: entered promiscuous mode [ 185.805944][T13877] veth1_macvtap: entered promiscuous mode [ 185.831293][T13877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.848523][T13877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.860759][ T4248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.870863][ T4248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.887884][ T4248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.916423][ T4248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.094626][T14021] pimreg: entered allmulticast mode [ 186.104076][T14021] pimreg: left allmulticast mode [ 186.395835][T14047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.403105][T14047] IPv6: NLM_F_CREATE should be set when creating new route [ 186.490890][T14055] loop6: detected capacity change from 0 to 512 [ 186.504571][T14055] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.511372][T14055] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 186.563165][T14055] EXT4-fs (loop6): 1 truncate cleaned up [ 186.570547][T14055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.942126][T14063] loop1: detected capacity change from 0 to 512 [ 186.963778][T14063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.995396][T14063] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.003490][T14063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 187.047409][T14063] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 187.056974][T14063] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 187.069738][T14063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.087059][T14063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.095725][T14063] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 187.132591][T13877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.193348][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3969'. [ 187.605729][T14101] IPv4: Oversized IP packet from 127.202.26.0 [ 187.618001][T12727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.675373][T14112] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3981'. [ 187.710210][T14116] tipc: Enabling of bearer rejected, failed to enable media [ 187.734857][T14119] netlink: 'syz.9.3983': attribute type 1 has an invalid length. [ 187.749173][T14119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.793633][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3983'. [ 187.809650][T14119] bond1 (unregistering): Released all slaves [ 187.837265][T14123] syzkaller0: entered promiscuous mode [ 187.842928][T14123] syzkaller0: entered allmulticast mode [ 187.934910][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.942477][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.949919][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.957391][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.965429][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.972857][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.980251][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.987907][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.995312][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 188.002677][ T3382] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 188.012151][ T3382] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 188.053485][T14139] netlink: 'syz.9.3991': attribute type 4 has an invalid length. [ 188.094497][T14147] blk_print_req_error: 244 callbacks suppressed [ 188.094513][T14147] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.110667][T14147] FAT-fs (loop19): unable to read boot sector [ 188.242005][T14165] can0: slcan on ttyS3. [ 188.353301][T14165] can0 (unregistered): slcan off ttyS3. [ 188.391509][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4015'. [ 188.397379][T14174] tipc: Started in network mode [ 188.405471][T14174] tipc: Node identity 9af967d28db6, cluster identity 4711 [ 188.412652][T14174] tipc: Enabled bearer , priority 0 [ 188.436360][T14172] tipc: Resetting bearer [ 188.452368][T14172] tipc: Disabling bearer [ 188.626393][T14198] loop6: detected capacity change from 0 to 1024 [ 188.645037][T14198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.668775][T12727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.738102][T14203] lo speed is unknown, defaulting to 1000 [ 188.745615][T14204] netlink: 'syz.6.4017': attribute type 10 has an invalid length. [ 188.758049][T14204] team0: Device hsr_slave_0 failed to register rx_handler [ 189.041199][T14220] geneve2: entered promiscuous mode [ 189.046474][T14220] geneve2: entered allmulticast mode [ 189.249540][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4031'. [ 189.412602][T14261] loop1: detected capacity change from 0 to 1024 [ 189.426410][T14261] EXT4-fs: Ignoring removed orlov option [ 189.441115][T14265] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 189.470950][T14261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.780913][T13877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.870679][T14296] netlink: 'syz.1.4056': attribute type 10 has an invalid length. [ 189.910696][T14296] team0: Device hsr_slave_0 failed to register rx_handler [ 189.945363][T14292] lo speed is unknown, defaulting to 1000 [ 190.125651][T14310] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4064'. [ 190.186242][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 190.186256][ T29] audit: type=1326 audit(190.162:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.215404][ T29] audit: type=1326 audit(190.162:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.272822][ T29] audit: type=1326 audit(190.162:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.295792][ T29] audit: type=1326 audit(190.162:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.318855][ T29] audit: type=1326 audit(190.162:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.341770][ T29] audit: type=1326 audit(190.162:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.364810][ T29] audit: type=1326 audit(190.162:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.387704][ T29] audit: type=1326 audit(190.162:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.410590][ T29] audit: type=1326 audit(190.162:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.433588][ T29] audit: type=1326 audit(190.162:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.1.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x7ffc0000 [ 190.513722][T14325] bond_slave_1: mtu less than device minimum [ 190.791135][T14343] lo speed is unknown, defaulting to 1000 [ 191.022312][T14391] pim6reg: entered allmulticast mode [ 191.045848][T14391] pim6reg: left allmulticast mode [ 191.064176][T14398] netlink: 'syz.2.4099': attribute type 30 has an invalid length. [ 191.090591][T14404] wg2: left promiscuous mode [ 191.095242][T14404] wg2: left allmulticast mode [ 191.106812][T14404] wg2: entered promiscuous mode [ 191.111759][T14404] wg2: entered allmulticast mode [ 191.198470][T14412] syzkaller1: entered promiscuous mode [ 191.204169][T14412] syzkaller1: entered allmulticast mode [ 191.247869][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4109'. [ 191.524927][T14434] lo speed is unknown, defaulting to 1000 [ 191.655316][T14449] loop6: detected capacity change from 0 to 512 [ 191.671046][T14451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4122'. [ 191.688859][T14449] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4121: iget: bad i_size value: 38620345925642 [ 191.731576][T14449] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4121: couldn't read orphan inode 15 (err -117) [ 191.753204][T14449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.908759][T14463] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4121: bg 0: block 5: invalid block bitmap [ 191.922460][T14463] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 191.934986][T14463] EXT4-fs (loop6): This should not happen!! Data will be lost [ 191.934986][T14463] [ 191.945284][T14463] EXT4-fs (loop6): Total free blocks count 0 [ 191.951271][T14463] EXT4-fs (loop6): Free/Dirty block details [ 191.957206][T14463] EXT4-fs (loop6): free_blocks=0 [ 191.962160][T14463] EXT4-fs (loop6): dirty_blocks=4960 [ 191.967484][T14463] EXT4-fs (loop6): Block reservation details [ 191.974136][T14463] EXT4-fs (loop6): i_reserved_data_blocks=4960 [ 192.091134][T14473] ip6tnl0: entered promiscuous mode [ 192.097177][T14473] ip6tnl0: entered allmulticast mode [ 192.117304][ T4202] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 192.338529][T14492] ip6tnl0: left promiscuous mode [ 192.343645][T14492] ip6tnl0: left allmulticast mode [ 192.390523][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.397756][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.471563][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.493348][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.539041][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4144'. [ 192.573481][ T4247] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.600204][ T4247] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.620411][ T4247] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.645307][ T4247] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.702491][T14481] lo speed is unknown, defaulting to 1000 [ 192.809761][T14491] lo speed is unknown, defaulting to 1000 [ 192.961897][T14574] ªªªªªª: renamed from vlan0 (while UP) [ 193.137432][T14596] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4161'. [ 193.176004][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4166'. [ 193.680599][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4178'. [ 193.942282][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4184'. [ 193.988853][T14637] team0 (unregistering): Port device team_slave_0 removed [ 194.015140][T14637] team0 (unregistering): Port device team_slave_1 removed [ 194.322205][T14667] wg2: entered promiscuous mode [ 194.327184][T14667] wg2: entered allmulticast mode [ 194.366687][T14670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14670 comm=syz.6.4199 [ 194.407934][T14675] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4201'. [ 194.809609][T14693] tipc: Started in network mode [ 194.815177][T14693] tipc: Node identity ac14140f, cluster identity 4711 [ 194.826748][T14693] tipc: New replicast peer: 255.255.255.83 [ 194.832884][T14693] tipc: Enabled bearer , priority 10 [ 195.281929][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 195.281945][ T29] audit: type=1400 audit(195.252:8311): avc: denied { read } for pid=14755 comm="syz.8.4233" path="socket:[43253]" dev="sockfs" ino=43253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.709047][T14764] loop6: detected capacity change from 0 to 1024 [ 195.717315][T14764] EXT4-fs: Ignoring removed bh option [ 195.722803][T14764] EXT4-fs: inline encryption not supported [ 195.729010][T14764] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.740586][T14764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 195.750030][T14764] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.4238: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.766502][T14764] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 195.775094][T14764] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.4238: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.791248][T14764] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 195.800674][T14764] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4238: Failed to acquire dquot type 0 [ 195.812309][T14764] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 195.818906][T14774] netlink: 'syz.8.4240': attribute type 4 has an invalid length. [ 195.821811][T14764] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.4238: mark_inode_dirty error [ 195.829511][T14774] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4240'. [ 195.853667][T14764] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 195.865408][T14764] EXT4-fs (loop6): 1 orphan inode deleted [ 195.871462][T14764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.886527][ T4202] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.903759][T14779] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4242'. [ 195.916031][ T4242] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.930439][ T4202] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 195.938292][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4243'. [ 195.939010][ T4202] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 195.959683][ T5534] tipc: Node number set to 2886997007 [ 195.989301][T14784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.001375][ T4242] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.032653][T14789] vlan2: entered allmulticast mode [ 196.038532][T14789] bond1: entered allmulticast mode [ 196.067554][ T4242] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.082976][ T4242] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.130605][ T29] audit: type=1326 audit(196.102:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 196.154417][ T29] audit: type=1326 audit(196.132:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 196.189230][ T29] audit: type=1326 audit(196.162:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 196.212146][ T29] audit: type=1326 audit(196.162:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 196.235341][ T29] audit: type=1326 audit(196.162:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 196.258377][ T29] audit: type=1326 audit(196.162:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 196.580857][T12727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.591300][T12727] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 196.605965][T12727] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 196.618725][T12727] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 196.780151][T14847] vlan2: entered allmulticast mode [ 196.790892][T14847] dummy0: entered allmulticast mode [ 196.873036][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4267'. [ 197.139690][T14888] ÿÿÿÿÿÿ: renamed from vlan1 [ 197.290825][ T5529] hid_parser_main: 16 callbacks suppressed [ 197.290840][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.304139][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.311558][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.319040][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.326571][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.334106][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.341614][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.349219][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.356639][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.364051][ T5529] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 197.378868][ T5529] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 197.471373][T14919] openvswitch: netlink: Message has 6 unknown bytes. [ 197.563750][T14917] lo speed is unknown, defaulting to 1000 [ 197.609347][T14936] netlink: 'syz.9.4302': attribute type 10 has an invalid length. [ 197.757281][T14949] __nla_validate_parse: 3 callbacks suppressed [ 197.757295][T14949] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.4306'. [ 198.035327][T14974] netlink: 'syz.1.4315': attribute type 12 has an invalid length. [ 198.585197][T15008] netlink: 'syz.9.4328': attribute type 10 has an invalid length. [ 198.593312][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4328'. [ 198.800484][T15020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4334'. [ 198.811622][T15020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15020 comm=syz.2.4334 [ 199.034266][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4337'. [ 199.057680][T15028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.091182][T15028] vlan0: entered allmulticast mode [ 199.096447][T15028] bond2: entered allmulticast mode [ 199.236852][T15058] Set syz1 is full, maxelem 65536 reached [ 199.269005][T15063] : renamed from bond0 [ 199.330420][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4357'. [ 199.354298][T15077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.374721][T15077] vlan2: entered allmulticast mode [ 199.379870][T15077] bond1: entered allmulticast mode [ 199.401438][T15082] batman_adv: batadv0: Adding interface: dummy0 [ 199.407830][T15082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.435920][T15082] batman_adv: batadv0: Interface activated: dummy0 [ 199.670119][T15107] loop6: detected capacity change from 0 to 512 [ 200.047269][T15107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.278827][T15113] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.4370: corrupted inode contents [ 200.315906][T15113] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #19: comm syz.6.4370: mark_inode_dirty error [ 200.353952][T15113] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.4370: corrupted inode contents [ 200.403609][T15113] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.4370: mark_inode_dirty error [ 200.431609][T15122] netlink: 'syz.9.4374': attribute type 3 has an invalid length. [ 200.456715][T15113] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.4370: mark inode dirty (error -117) [ 200.465015][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 200.465029][ T29] audit: type=1400 audit(200.432:8472): avc: denied { firmware_load } for pid=15125 comm="syz.2.4376" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.483159][T15113] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 200.582775][ T29] audit: type=1400 audit(200.542:8473): avc: denied { setopt } for pid=15135 comm="syz.1.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.637862][T12727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.788142][ T29] audit: type=1400 audit(200.762:8474): avc: denied { read } for pid=15149 comm="syz.6.4383" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 200.811735][ T29] audit: type=1400 audit(200.762:8475): avc: denied { open } for pid=15149 comm="syz.6.4383" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 200.920708][T15181] loop6: detected capacity change from 0 to 512 [ 200.936242][T15181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.955615][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4397'. [ 200.965223][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4397'. [ 200.985517][T15181] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.4398: corrupted inode contents [ 201.007160][T15181] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #19: comm syz.6.4398: mark_inode_dirty error [ 201.018797][T15181] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.4398: corrupted inode contents [ 201.030961][T15181] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.4398: mark_inode_dirty error [ 201.043278][T15181] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.4398: mark inode dirty (error -117) [ 201.057326][T15181] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 201.080987][T12727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.186638][T15195] netlink: 'syz.6.4401': attribute type 10 has an invalid length. [ 201.194498][T15195] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4401'. [ 201.204536][T15195] batman_adv: batadv0: Adding interface: veth1_vlan [ 201.211268][T15195] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.237207][T15195] batman_adv: batadv0: Interface activated: veth1_vlan [ 201.277160][T15201] : renamed from bond0 (while UP) [ 201.461858][ T29] audit: type=1400 audit(201.432:8476): avc: denied { ioctl } for pid=15222 comm="syz.1.4416" path="socket:[43939]" dev="sockfs" ino=43939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.491223][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4416'. [ 201.510549][T15228] : renamed from bond0 [ 201.525117][T15224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.561505][T15234] bridge0: entered allmulticast mode [ 201.572290][T15234] ip6gretap0: left allmulticast mode [ 201.584861][T15234] ip6gretap0: left promiscuous mode [ 201.594789][T15234] bridge0: port 3(ip6gretap0) entered disabled state [ 201.614662][T15234] bridge_slave_1: left allmulticast mode [ 201.620874][T15234] bridge_slave_1: left promiscuous mode [ 201.627504][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.628098][ T29] audit: type=1326 audit(201.602:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.1.4422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a032aeec9 code=0x0 [ 201.661906][T15234] bridge_slave_0: left allmulticast mode [ 201.676860][T15234] bridge_slave_0: left promiscuous mode [ 201.683216][T15234] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.762377][T15223] lo speed is unknown, defaulting to 1000 [ 201.828238][ T29] audit: type=1326 audit(201.802:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.9.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 201.851790][ T29] audit: type=1326 audit(201.802:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.9.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 201.875372][ T29] audit: type=1326 audit(201.802:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.9.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 201.898397][ T29] audit: type=1326 audit(201.802:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.9.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 202.033735][T15277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15277 comm=syz.9.4437 [ 202.046378][T15277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15277 comm=syz.9.4437 [ 202.106445][T15285] geneve2: entered promiscuous mode [ 202.111681][T15285] geneve2: entered allmulticast mode [ 202.130954][T15291] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4443'. [ 202.221581][T15306] tipc: Started in network mode [ 202.226527][T15306] tipc: Node identity 4, cluster identity 4711 [ 202.232714][T15306] tipc: Node number set to 4 [ 202.419438][T15322] netlink: 'syz.8.4456': attribute type 10 has an invalid length. [ 202.429857][T15322] team0: Port device dummy0 added [ 202.436293][T15322] netlink: 'syz.8.4456': attribute type 10 has an invalid length. [ 202.444742][T15322] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.454182][T15322] team0: Failed to send options change via netlink (err -105) [ 202.461751][T15322] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.471403][T15322] team0: Port device dummy0 removed [ 202.482743][T15322] : (slave dummy0): Enslaving as an active interface with an up link [ 202.566385][T15329] netlink: 'syz.2.4459': attribute type 7 has an invalid length. [ 203.137735][T15363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15363 comm=syz.6.4472 [ 203.150870][T15363] __nla_validate_parse: 1 callbacks suppressed [ 203.150884][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4472'. [ 203.674358][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4487'. [ 203.830029][T15414] syzkaller0: refused to change device tx_queue_len [ 204.059090][T15426] netlink: 'syz.9.4497': attribute type 12 has an invalid length. [ 204.083929][T15436] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4500'. [ 204.282525][T15453] bridge0: entered allmulticast mode [ 204.388041][T15455] netlink: 'syz.2.4508': attribute type 10 has an invalid length. [ 204.424091][T15455] netlink: 'syz.2.4508': attribute type 10 has an invalid length. [ 204.435195][T15455] : (slave dummy0): Enslaving as an active interface with an up link [ 204.445861][T15459] netlink: 'syz.8.4509': attribute type 4 has an invalid length. [ 204.460010][T15459] netlink: 'syz.8.4509': attribute type 4 has an invalid length. [ 204.541980][T15469] loop6: detected capacity change from 0 to 128 [ 204.642359][T15479] geneve1: entered promiscuous mode [ 204.648364][T15479] geneve1: entered allmulticast mode [ 204.759110][T15484] tipc: Cannot configure node identity twice [ 205.493342][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 205.493392][ T29] audit: type=1326 audit(205.462:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.522535][ T29] audit: type=1326 audit(205.462:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.546234][ T29] audit: type=1326 audit(205.462:8678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.569314][ T29] audit: type=1326 audit(205.462:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.592818][ T29] audit: type=1326 audit(205.462:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.615745][ T29] audit: type=1326 audit(205.462:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.694382][ T29] audit: type=1326 audit(205.672:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.717474][ T29] audit: type=1326 audit(205.672:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 205.811561][ T29] audit: type=1326 audit(205.732:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2454700de7 code=0x7ffc0000 [ 205.835117][ T29] audit: type=1326 audit(205.732:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.9.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24546feec9 code=0x7ffc0000 [ 206.402423][T15550] lo speed is unknown, defaulting to 1000 [ 206.790103][T15557] lo speed is unknown, defaulting to 1000 [ 207.532816][T15582] loop6: detected capacity change from 0 to 512 [ 207.539684][T15580] netlink: 'syz.9.4552': attribute type 4 has an invalid length. [ 207.547626][T15582] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.566015][T15583] netlink: 'syz.9.4552': attribute type 4 has an invalid length. [ 207.595433][T15582] EXT4-fs (loop6): 1 truncate cleaned up [ 207.601554][T15582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.167983][T12727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.402273][T15626] IPv4: Oversized IP packet from 127.202.26.0 [ 209.461086][T15668] lo speed is unknown, defaulting to 1000 [ 210.102250][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4602'. [ 210.124892][T15712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.142638][T15712] vlan0: entered allmulticast mode [ 210.148051][T15712] bond0: entered allmulticast mode [ 210.239751][T15719] $Hÿ: renamed from .` [ 210.246023][T15719] $Hÿ: entered promiscuous mode [ 210.413841][T15737] lo speed is unknown, defaulting to 1000 [ 210.609115][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 210.609127][ T29] audit: type=1326 audit(210.582:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15760 comm="syz.1.4621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a032aeec9 code=0x0 [ 210.870008][ T29] audit: type=1400 audit(210.842:8742): avc: denied { ioctl } for pid=15771 comm="syz.9.4624" path="socket:[46496]" dev="sockfs" ino=46496 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.897273][T15774] cgroup: fork rejected by pids controller in /syz6 [ 211.350093][T15811] syzkaller0: entered allmulticast mode [ 211.363575][T15811] syzkaller0: entered promiscuous mode [ 211.378616][T15811] syzkaller0 (unregistering): left allmulticast mode [ 211.386146][T15811] syzkaller0 (unregistering): left promiscuous mode [ 211.467682][ T4247] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.586610][ T4247] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.697789][ T4247] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.708628][ T29] audit: type=1400 audit(211.622:8743): avc: denied { shutdown } for pid=15820 comm="syz.9.4642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 211.915661][ T4247] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.014453][T15842] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 212.049631][T15824] lo speed is unknown, defaulting to 1000 [ 212.061520][ T4247] bridge_slave_1: left allmulticast mode [ 212.067280][ T4247] bridge_slave_1: left promiscuous mode [ 212.073055][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.091236][ T4247] bridge_slave_0: left allmulticast mode [ 212.097702][ T4247] bridge_slave_0: left promiscuous mode [ 212.103464][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.285147][ T4247]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.296333][ T4247]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.305848][ T4247]  (unregistering): Released all slaves [ 212.314048][ T4247] bond1 (unregistering): Released all slaves [ 212.322527][ T4247] bond0 (unregistering): Released all slaves [ 212.366101][ T4247] tipc: Left network mode [ 212.380381][T15824] chnl_net:caif_netlink_parms(): no params data found [ 212.415339][ T4247] hsr_slave_0: left promiscuous mode [ 212.421008][ T4247] hsr_slave_1: left promiscuous mode [ 212.426580][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.434041][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.441712][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.449823][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.458134][ T4247] batman_adv: batadv0: Interface deactivated: dummy0 [ 212.465572][ T4247] batman_adv: batadv0: Removing interface: dummy0 [ 212.472565][ T4247] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 212.480353][ T4247] batman_adv: batadv0: Removing interface: veth1_vlan [ 212.490357][ T4247] veth1_macvtap: left promiscuous mode [ 212.495972][ T4247] veth0_macvtap: left promiscuous mode [ 212.501823][ T4247] veth1_vlan: left promiscuous mode [ 212.507835][ T4247] veth0_vlan: left promiscuous mode [ 212.525441][ T29] audit: type=1326 audit(212.502:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.549411][ T29] audit: type=1326 audit(212.502:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.590281][ T29] audit: type=1326 audit(212.502:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.614014][ T29] audit: type=1326 audit(212.502:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.636957][ T29] audit: type=1326 audit(212.502:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.660448][ T29] audit: type=1326 audit(212.502:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.683819][ T29] audit: type=1326 audit(212.522:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.2.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe929a2eec9 code=0x7ffc0000 [ 212.754988][ T3382] lo speed is unknown, defaulting to 1000 [ 212.760761][ T3382] infiniband syz2: ib_query_port failed (-19) [ 212.781208][T15824] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.788804][T15824] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.796411][T15824] bridge_slave_0: entered allmulticast mode [ 212.803232][T15824] bridge_slave_0: entered promiscuous mode [ 212.810159][T15824] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.817949][T15824] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.830751][T15824] bridge_slave_1: entered allmulticast mode [ 212.837485][T15824] bridge_slave_1: entered promiscuous mode [ 212.859848][T15824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.883366][T15824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.909218][T15824] team0: Port device team_slave_0 added [ 212.915793][T15824] team0: Port device team_slave_1 added [ 212.941741][T15824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.948796][T15824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.974733][T15824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.993159][T15824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.000123][T15824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.026783][T15824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.075636][T15824] hsr_slave_0: entered promiscuous mode [ 213.081946][T15824] hsr_slave_1: entered promiscuous mode [ 213.088496][T15824] debugfs: 'hsr0' already exists in 'hsr' [ 213.094267][T15824] Cannot create hsr debugfs directory [ 213.365944][T15878] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 213.567319][T15824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.595930][T15824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.616719][T15824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.637042][T15824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.710309][T15824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.733757][T15824] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.754071][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.761170][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.793732][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.800809][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.837810][T15824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.848387][T15824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.953745][T15824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.138830][T15907] netlink: 'syz.9.4661': attribute type 4 has an invalid length. [ 214.150854][T15907] netlink: 'syz.9.4661': attribute type 4 has an invalid length. [ 214.169505][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4663'. [ 214.205301][T15824] veth0_vlan: entered promiscuous mode [ 214.217685][T15917] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.4665'. [ 214.229744][T15824] veth1_vlan: entered promiscuous mode [ 214.248628][T15824] veth0_macvtap: entered promiscuous mode [ 214.256040][T15824] veth1_macvtap: entered promiscuous mode [ 214.268306][T15824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.279768][T15824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.290330][ T4231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.299778][ T4231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.313438][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.323688][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.448186][ T5529] IPVS: starting estimator thread 0... [ 214.496406][T15935] syzkaller0: entered promiscuous mode [ 214.501917][T15935] syzkaller0: entered allmulticast mode [ 214.542916][T15931] IPVS: using max 3120 ests per chain, 156000 per kthread [ 214.682126][ T3382] hid_parser_main: 8 callbacks suppressed [ 214.682140][ T3382] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.705742][ T3382] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.948194][T15950] sctp: [Deprecated]: syz.2.4677 (pid 15950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.948194][T15950] Use struct sctp_sack_info instead [ 215.239051][T15959] loop6: detected capacity change from 0 to 128 [ 215.246827][T15959] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.259359][T15959] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.284345][ T4248] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.303200][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4682'. [ 215.770483][T15975] tap0: tun_chr_ioctl cmd 1074025677 [ 215.778634][T15975] tap0: linktype set to 774 [ 215.818257][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4689'. [ 215.881825][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4691'. [ 215.902040][T15984] netlink: 'syz.8.4690': attribute type 4 has an invalid length. [ 215.916225][T15984] netlink: 'syz.8.4690': attribute type 4 has an invalid length. [ 215.926918][T15986] wg2: left promiscuous mode [ 215.931610][T15986] wg2: left allmulticast mode [ 215.948403][T15986] wg2: entered promiscuous mode [ 215.953356][T15986] wg2: entered allmulticast mode [ 216.619366][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4706'. [ 216.898968][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 216.898986][ T29] audit: type=1400 audit(216.872:9085): avc: denied { getopt } for pid=16026 comm="syz.2.4710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.927200][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4712'. [ 216.944863][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4712'. [ 217.010244][ T29] audit: type=1326 audit(216.982:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.033161][ T29] audit: type=1326 audit(216.982:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.055374][ T29] audit: type=1326 audit(216.982:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.078259][ T29] audit: type=1326 audit(216.982:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.100516][ T29] audit: type=1326 audit(216.982:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.122749][ T29] audit: type=1326 audit(216.982:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.145840][ T29] audit: type=1326 audit(216.982:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.168035][ T29] audit: type=1326 audit(216.982:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.207886][T16041] loop6: detected capacity change from 0 to 2048 [ 217.220020][ T29] audit: type=1326 audit(217.042:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd63333eec9 code=0x7ffc0000 [ 217.264736][T16041] loop6: p1 < > p4 [ 217.269960][T16041] loop6: p4 size 8388608 extends beyond EOD, truncated [ 217.369335][T16047] loop6: detected capacity change from 0 to 512 [ 217.390110][T16047] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 217.477929][T16047] EXT4-fs (loop6): failed to open journal device unknown-block(0,4) -6 [ 217.608531][T16057] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4723'. [ 217.631361][T16057] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 217.656957][T16057] team0: Port device team_slave_1 removed [ 217.901267][T16085] loop6: detected capacity change from 0 to 512 [ 217.931609][T16085] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 217.979713][T16085] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4733: invalid indirect mapped block 4294967295 (level 0) [ 218.006256][T16085] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4733: invalid indirect mapped block 4294967295 (level 1) [ 218.020726][T16085] EXT4-fs (loop6): 1 orphan inode deleted [ 218.026531][T16085] EXT4-fs (loop6): 1 truncate cleaned up [ 218.035839][T16085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.086503][T15824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.103409][T16093] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.129310][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4737'. [ 218.154460][T16093] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.206729][T16093] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.265044][T16093] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.340457][ T4248] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.356048][ T4231] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.367136][ T4231] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.382048][ T4231] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.566756][T16166] tipc: Enabling of bearer rejected, failed to enable media [ 219.175153][T16247] : (slave dummy0): Releasing backup interface [ 219.330205][T16270] tipc: Enabling of bearer rejected, failed to enable media [ 219.342043][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4762'. [ 219.387577][T16274] pim6reg: entered allmulticast mode [ 219.388944][T16279] SELinux: Context Ü is not valid (left unmapped). [ 219.400318][T16274] pim6reg: left allmulticast mode [ 219.780061][T16308] vlan0: entered allmulticast mode [ 219.786035][T16308] dummy0: entered allmulticast mode [ 220.221069][T16341] netlink: 'syz.2.4793': attribute type 1 has an invalid length. [ 220.248579][T16341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.263629][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4793'. [ 220.314209][T16341] bond1 (unregistering): Released all slaves [ 220.323100][T16350] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 220.331891][T16350] SELinux: failed to load policy [ 220.373695][T16352] loop6: detected capacity change from 0 to 1024 [ 220.386436][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4799'. [ 220.388813][T16352] EXT4-fs: Ignoring removed orlov option [ 220.406354][T16352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.593690][T15824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.646049][T16366] loop6: detected capacity change from 0 to 512 [ 220.652880][T16366] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.664090][T16366] EXT4-fs (loop6): 1 truncate cleaned up [ 220.669932][T16366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.355796][T16368] ================================================================== [ 221.363907][T16368] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 221.371733][T16368] [ 221.374076][T16368] write to 0xffffea0005739b98 of 8 bytes by task 16366 on cpu 1: [ 221.381775][T16368] __filemap_remove_folio+0x1a5/0x2a0 [ 221.387151][T16368] folio_unmap_invalidate+0x1dd/0x360 [ 221.393233][T16368] invalidate_inode_pages2_range+0x27c/0x3d0 [ 221.402205][T16368] filemap_invalidate_pages+0x16d/0x1a0 [ 221.407941][T16368] kiocb_invalidate_pages+0x6e/0x80 [ 221.413284][T16368] __iomap_dio_rw+0x5d4/0x1250 [ 221.418140][T16368] iomap_dio_rw+0x40/0x90 [ 221.422470][T16368] ext4_file_write_iter+0xad9/0xf00 [ 221.427676][T16368] iter_file_splice_write+0x666/0xa60 [ 221.433125][T16368] direct_splice_actor+0x156/0x2a0 [ 221.438231][T16368] splice_direct_to_actor+0x312/0x680 [ 221.443604][T16368] do_splice_direct+0xda/0x150 [ 221.448367][T16368] do_sendfile+0x380/0x650 [ 221.452804][T16368] __x64_sys_sendfile64+0x105/0x150 [ 221.458002][T16368] x64_sys_call+0x2bb0/0x2ff0 [ 221.462670][T16368] do_syscall_64+0xd2/0x200 [ 221.467176][T16368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.473148][T16368] [ 221.475630][T16368] read to 0xffffea0005739b98 of 8 bytes by task 16368 on cpu 0: [ 221.483247][T16368] folio_mapping+0xa1/0x120 [ 221.487751][T16368] lru_add+0x80/0x430 [ 221.491729][T16368] folio_batch_move_lru+0x1c2/0x280 [ 221.496913][T16368] lru_add_drain_cpu+0x77/0x250 [ 221.501759][T16368] __folio_batch_release+0x44/0xb0 [ 221.506888][T16368] mapping_try_invalidate+0x371/0x3f0 [ 221.512772][T16368] invalidate_mapping_pages+0x27/0x40 [ 221.518145][T16368] ext4_file_write_iter+0xe70/0xf00 [ 221.523363][T16368] iter_file_splice_write+0x666/0xa60 [ 221.528725][T16368] direct_splice_actor+0x156/0x2a0 [ 221.533910][T16368] splice_direct_to_actor+0x312/0x680 [ 221.539270][T16368] do_splice_direct+0xda/0x150 [ 221.544020][T16368] do_sendfile+0x380/0x650 [ 221.548431][T16368] __x64_sys_sendfile64+0x105/0x150 [ 221.553620][T16368] x64_sys_call+0x2bb0/0x2ff0 [ 221.558288][T16368] do_syscall_64+0xd2/0x200 [ 221.562794][T16368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.568680][T16368] [ 221.570984][T16368] value changed: 0xffff88811a681c90 -> 0x0000000000000000 [ 221.578072][T16368] [ 221.580377][T16368] Reported by Kernel Concurrency Sanitizer on: [ 221.586510][T16368] CPU: 0 UID: 0 PID: 16368 Comm: syz.6.4803 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.596301][T16368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.606341][T16368] ================================================================== [ 221.811258][T15824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.