last executing test programs: 30.272300332s ago: executing program 2 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}, 0x0) 30.241887475s ago: executing program 2 (id=209): socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x18, 0x5, 0x0, 0x0, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 30.077174638s ago: executing program 2 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd79, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 30.033713882s ago: executing program 2 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 30.032916951s ago: executing program 2 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f00000002c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(0x0, 0x21, 0x0) 28.209868659s ago: executing program 3 (id=228): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 27.93960753s ago: executing program 3 (id=233): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x81cc46, &(0x7f00000008c0)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYRES64=r2, @ANYRES16=r2], 0xfb, 0x2c3, &(0x7f0000000fc0)="$eJzs3M9rE0EUwPGXpM0mlbY5CYrgAy96WWo8qtgoLYgBJe2KehC2dKshMSnZRZMimLOn/h3FozfB/6B3/wBvRZCeenIlySZdY9KfIWnT7wfCvp03Q2cyKbwp3ey82HxXWHPNNduTaEIlKlKXvaikJC9tkeAab8bxTrvcT0tdbs293/289PLVk0w2u5BTXcws30mr6sz17x8+ftm45l16/nXGMGQ79Xrnd/rn9uXtKzt/lt/mXc27Wip7cdGVctmzV4qOrubdgqn6rOjYrqP5kutUPLX382vF8vp6Te3S6vTUesVxXbVLNY1KTb2yJoJZldQ0TZ2easQJuUDi/VN93gdrK5ezM8cZgfOnUsnYMRFJ/ren1tZoZgQAAEapd/0vkmpEgXb9H+2u/0UOqf8/Bb1mvvWv/8P1/THq/5h06v+C06z/vUpN7Td2Plz/X1APjtjPmu9b/3eZD14SfA5wxkTqoZuHodhv1P/J3oOo/wEAAAAAAAAAAAAAAAAAAAAAOA/2fH/W9/3ZxjUqIn5wb4hILHTfYyhPiI+B8P77oZcRbPAB+48xEHpwLyHyq161qlakeW3lFx9nF+a0KfTg3261asU6+dutvP6bn5SpIJ/umY/LzRutfCP36Gk2nN+sWklZbd9O9pp5fZBvAwAAAAAAY83UjlSnMSGd871pqiHd+eb5vRlMiEj77wNd5/sJuToxxIUAAAAAAIC+3NpGwS4Wncpwglj/VFSGN42DA5GTDb/rGwOZRkxEQi1GsFXhPrklkcEtOS4nXXJXYIjTnu1wN+5HZvQfm9MGiSN1vjewH+pHRFot7f+v6fotAAAAADBe9s8Do54JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1+m/uix5aJ9RrxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4K/4GAAD//0xIstI=") r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 27.841463098s ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.832526979s ago: executing program 32 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.672949812s ago: executing program 3 (id=239): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0xf8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) 27.57264813s ago: executing program 3 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 27.520668054s ago: executing program 3 (id=242): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0x4000000000000000) 27.083083279s ago: executing program 3 (id=246): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1d", 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 27.060310251s ago: executing program 33 (id=246): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1d", 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 23.368731899s ago: executing program 6 (id=300): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5", 0xb, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 22.497738909s ago: executing program 1 (id=321): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900462b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 22.369515989s ago: executing program 1 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 22.342167861s ago: executing program 1 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 22.276246847s ago: executing program 1 (id=326): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 21.960855652s ago: executing program 6 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 21.938501073s ago: executing program 1 (id=333): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 21.687401184s ago: executing program 1 (id=336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 21.673819115s ago: executing program 34 (id=336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 21.198269093s ago: executing program 6 (id=345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 21.164059566s ago: executing program 6 (id=346): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$eJzs3T9qFGEYBvDXGJM1FqYQbCxGbKwW9QaDRBAHhJUptHIg2mRFmTSj1Z7ATryDF/AGnsJTpEq3kp0hk782mpls5veDMA95GPb9YNnd4vt23977sLP9cff9t1/fYzRKYiViFvsRmwepca25rizyWhw1CwBg2UwmRdr3DFysskyLGxGxfqrJf/QyEAAAAAAAAAAAAP/M/n8AGB77/6++skyLjebz23H2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD92Z/Pb8//8tf3fADA/+f9HwCG59XrNy/SLNuaJMkoYm9W5VVeX+v+2fNs61GysNnetVdV+fXD/nHdJ0159/7XT4uw0fRPjvfN/Wvx8EHdH3RPX2Yn+vXY7mD9AAAAAAAAAAAAAAAAAAAAcBmMk0Nnnu8fj8/r63Tk+wFOnN9fjVurnS0DAAAAAAAAAAAAAAAAAAAAltru5y87xXT6rmzD71P/GUxILscYXYSb5z8BBKGY9vzCBAAAAAAAAAAAAAAAAAAAA9Qe+u17EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoT/v7/xcXznzgn3c6XysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNz+BAAA//9auV53") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 20.790901216s ago: executing program 6 (id=348): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(0x0, 0x5) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x100004}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 20.727019601s ago: executing program 5 (id=350): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 20.580692883s ago: executing program 6 (id=352): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) 20.555678065s ago: executing program 35 (id=352): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) 20.389673468s ago: executing program 5 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x48) close(r4) 20.354689461s ago: executing program 5 (id=356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 20.300784865s ago: executing program 5 (id=358): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$eJzs3T9qFGEYBvDXGJM1FqYQbCxGbKwW9QaDRBAHhJUptHIg2mRFmTSj1Z7ATryDF/AGnsJTpEq3kp0hk782mpls5veDMA95GPb9YNnd4vt23977sLP9cff9t1/fYzRKYiViFvsRmwepca25rizyWhw1CwBg2UwmRdr3DFysskyLGxGxfqrJf/QyEAAAAAAAAAAAAP/M/n8AGB77/6++skyLjebz23H2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD92Z/Pb8//8tf3fADA/+f9HwCG59XrNy/SLNuaJMkoYm9W5VVeX+v+2fNs61GysNnetVdV+fXD/nHdJ0159/7XT4uw0fRPjvfN/Wvx8EHdH3RPX2Yn+vXY7mD9AAAAAAAAAAAAAAAAAAAAcBmMk0Nnnu8fj8/r63Tk+wFOnN9fjVurnS0DAAAAAAAAAAAAAAAAAAAAltru5y87xXT6rmzD71P/GUxILscYXYSb5z8BBKGY9vzCBAAAAAAAAAAAAAAAAAAAA9Qe+u17EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoT/v7/xcXznzgn3c6XysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNz+BAAA//9auV53") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 19.918418216s ago: executing program 5 (id=363): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='contention_end\x00', r3, 0x0, 0x100020000000004}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 19.648665668s ago: executing program 5 (id=367): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 19.648488858s ago: executing program 36 (id=367): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.985384049s ago: executing program 8 (id=659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r1, 0xffffffffffffffff, 0x0) 2.950164492s ago: executing program 8 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x193) msgsnd(r1, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000"], 0x3f9, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x3000) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.124787449s ago: executing program 7 (id=672): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.998851779s ago: executing program 8 (id=679): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) write(r2, 0x0, 0x0) 1.929125734s ago: executing program 4 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x17000000, 0x5, 0x9, 0x5, 0x1c0000, {0x3, 0x2, 0x2, 0x0, 0x5, 0x8}, {0x8, 0x0, 0x1, 0x5, 0x7}, 0x8, 0x9, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 1.840169152s ago: executing program 4 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.725299821s ago: executing program 0 (id=685): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000600) 1.725066721s ago: executing program 4 (id=686): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) time(0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40006063) 1.601204291s ago: executing program 0 (id=687): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.600907741s ago: executing program 7 (id=688): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.600720191s ago: executing program 4 (id=689): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x3a17, &(0x7f0000000b00)={0x0, 0x133e, 0x0, 0x2, 0x276}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.508918218s ago: executing program 0 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 1.471623611s ago: executing program 7 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.471078301s ago: executing program 0 (id=692): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffff81}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 1.357097981s ago: executing program 4 (id=693): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.105508191s ago: executing program 4 (id=694): mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1.055761885s ago: executing program 8 (id=695): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = syz_io_uring_setup(0x83d, &(0x7f0000000500)={0x0, 0x9770, 0x80, 0x2, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r2, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 860.04857ms ago: executing program 7 (id=698): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 838.776892ms ago: executing program 9 (id=699): creat(0x0, 0x28) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 656.906317ms ago: executing program 7 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 503.615649ms ago: executing program 8 (id=701): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 503.000269ms ago: executing program 7 (id=711): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 455.840403ms ago: executing program 8 (id=702): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000340)=""/117, 0x92}], 0x1, 0x0, 0xa0000000) ppoll(&(0x7f0000000440)=[{r0, 0x1065}], 0x1, 0x0, 0x0, 0x0) 418.830406ms ago: executing program 0 (id=703): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) ptrace$cont(0x7, 0x0, 0x0, 0xffffffffffff8025) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 284.734927ms ago: executing program 9 (id=704): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) accept4(r0, 0x0, 0x0, 0x80800) 260.904799ms ago: executing program 9 (id=705): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40018003, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020600) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) 233.463081ms ago: executing program 9 (id=706): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x81e, &(0x7f0000000480)={0x0, 0x40, 0x10, 0xfffffffe, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 101.137942ms ago: executing program 9 (id=707): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setns(r3, 0x24020000) 1.610709ms ago: executing program 9 (id=708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) kernel console output (not intermixed with test programs): T3302] Cannot create hsr debugfs directory [ 30.709533][ T3300] hsr_slave_0: entered promiscuous mode [ 30.715594][ T3300] hsr_slave_1: entered promiscuous mode [ 30.721436][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.727151][ T3300] Cannot create hsr debugfs directory [ 30.756524][ T3306] hsr_slave_0: entered promiscuous mode [ 30.762686][ T3306] hsr_slave_1: entered promiscuous mode [ 30.768429][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 30.774149][ T3306] Cannot create hsr debugfs directory [ 30.927605][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.946570][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.957315][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.965998][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.977244][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.985524][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.996705][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.008949][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.026951][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.041862][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.050549][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.061267][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.087234][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.099257][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.108461][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.118254][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.138353][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.166455][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.190341][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.210900][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.218031][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.226894][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.233975][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.245892][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.253446][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.267877][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.279844][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.304708][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.319994][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.327085][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.344448][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.353973][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.361138][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.380916][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.414958][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.422097][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.432433][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.442337][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.449412][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.466376][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.490918][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.508281][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.520433][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.531203][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.538410][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.561051][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.572681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.579773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.615543][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.625940][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.649379][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.656511][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.667523][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.674580][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.754579][ T3305] veth0_vlan: entered promiscuous mode [ 31.764859][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.776492][ T3299] veth0_vlan: entered promiscuous mode [ 31.787408][ T3299] veth1_vlan: entered promiscuous mode [ 31.799122][ T3305] veth1_vlan: entered promiscuous mode [ 31.810326][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.836947][ T3299] veth0_macvtap: entered promiscuous mode [ 31.846756][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.861479][ T3299] veth1_macvtap: entered promiscuous mode [ 31.886544][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.897223][ T3305] veth0_macvtap: entered promiscuous mode [ 31.906259][ T3305] veth1_macvtap: entered promiscuous mode [ 31.921049][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.940019][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.955715][ T3441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.966768][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.979381][ T3302] veth0_vlan: entered promiscuous mode [ 31.989619][ T3441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.998364][ T3441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.007655][ T3441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.025994][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.036535][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054302][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.054314][ T29] audit: type=1400 audit(1755169435.338:81): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.AlWNO0/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.085102][ T29] audit: type=1400 audit(1755169435.338:82): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.107060][ T29] audit: type=1400 audit(1755169435.338:83): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.AlWNO0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.132353][ T29] audit: type=1400 audit(1755169435.338:84): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.154105][ T29] audit: type=1400 audit(1755169435.338:85): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.AlWNO0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.180621][ T29] audit: type=1400 audit(1755169435.338:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.AlWNO0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.208062][ T29] audit: type=1400 audit(1755169435.338:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.230061][ T29] audit: type=1400 audit(1755169435.518:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.240112][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.252792][ T29] audit: type=1400 audit(1755169435.518:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=4579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.268414][ T3302] veth1_vlan: entered promiscuous mode [ 32.298819][ T3302] veth0_macvtap: entered promiscuous mode [ 32.307296][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.326127][ T29] audit: type=1400 audit(1755169435.608:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.330729][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367777][ T3300] veth0_vlan: entered promiscuous mode [ 32.375656][ T3300] veth1_vlan: entered promiscuous mode [ 32.391826][ T3302] veth1_macvtap: entered promiscuous mode [ 32.405517][ T3306] veth0_vlan: entered promiscuous mode [ 32.411462][ T3474] process 'syz.4.6' launched './file0' with NULL argv: empty string added [ 32.422734][ T3300] veth0_macvtap: entered promiscuous mode [ 32.438208][ T3300] veth1_macvtap: entered promiscuous mode [ 32.453509][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.461550][ T3306] veth1_vlan: entered promiscuous mode [ 32.468227][ T3478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 32.475449][ T3478] IPv6: NLM_F_CREATE should be set when creating new route [ 32.488319][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.502052][ T3441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512057][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.534856][ T3306] veth0_macvtap: entered promiscuous mode [ 32.541636][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.561457][ T322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.571639][ T3483] netlink: 'syz.3.9': attribute type 30 has an invalid length. [ 32.579754][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.590025][ T3306] veth1_macvtap: entered promiscuous mode [ 32.599029][ T322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.612472][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.623503][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.747943][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.762112][ T3483] Zero length message leads to an empty skb [ 32.775904][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.802183][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.812170][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.825107][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.865690][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.891484][ T3491] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.900773][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.917170][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.970531][ T3500] loop4: detected capacity change from 0 to 1024 [ 32.983013][ T3500] ======================================================= [ 32.983013][ T3500] WARNING: The mand mount option has been deprecated and [ 32.983013][ T3500] and is ignored by this kernel. Remove the mand [ 32.983013][ T3500] option from the mount to silence this warning. [ 32.983013][ T3500] ======================================================= [ 33.040206][ T3504] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 33.052208][ T3504] hsr_slave_0: left promiscuous mode [ 33.057946][ T3504] hsr_slave_1: left promiscuous mode [ 33.070874][ T3500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.097935][ T3500] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 33.153461][ T3515] loop3: detected capacity change from 0 to 512 [ 33.183777][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.197284][ T3515] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.231594][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.297777][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 33.312119][ T41] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.329231][ T41] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.333733][ T3500] syz.4.12 (3500) used greatest stack depth: 10888 bytes left [ 33.348029][ T41] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.360016][ T41] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.367615][ T3529] syz.3.17 (3529) used greatest stack depth: 10080 bytes left [ 33.379828][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.439690][ T3535] tipc: Started in network mode [ 33.444745][ T3535] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 33.444877][ T3537] loop3: detected capacity change from 0 to 164 [ 33.454626][ T3535] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 33.468214][ T3535] tipc: Enabled bearer , priority 10 [ 33.506329][ T3537] syz.3.21: attempt to access beyond end of device [ 33.506329][ T3537] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 33.537613][ T3537] syz.3.21: attempt to access beyond end of device [ 33.537613][ T3537] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.585027][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 33.610613][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 33.652581][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 33.661484][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 33.675422][ T3551] bridge0: port 3(vlan2) entered blocking state [ 33.681862][ T3551] bridge0: port 3(vlan2) entered disabled state [ 33.688440][ T3551] vlan2: entered allmulticast mode [ 33.693598][ T3551] bridge0: entered allmulticast mode [ 33.699934][ T3551] vlan2: left allmulticast mode [ 33.704813][ T3551] bridge0: left allmulticast mode [ 33.714144][ T3555] wireguard0: entered promiscuous mode [ 33.719702][ T3555] wireguard0: entered allmulticast mode [ 33.734546][ T3557] bond1: entered promiscuous mode [ 33.739661][ T3557] bond1: entered allmulticast mode [ 33.744952][ T3557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.762665][ T3557] bond1 (unregistering): Released all slaves [ 33.833527][ T3563] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 33.845550][ T3565] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 33.856514][ T3565] team0: Port device dummy0 added [ 33.872721][ T3565] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 33.883701][ T3565] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 33.896971][ T3565] team0: Failed to send options change via netlink (err -105) [ 33.905398][ T3565] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 33.914588][ T3565] team0: Port device dummy0 removed [ 33.922144][ T3565] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.080461][ T3585] netlink: 76 bytes leftover after parsing attributes in process `syz.4.41'. [ 34.092790][ T3587] tls_set_device_offload: netdev not found [ 34.100843][ T3582] loop2: detected capacity change from 0 to 4096 [ 34.107601][ T3583] loop1: detected capacity change from 0 to 2048 [ 34.114175][ T3582] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.127921][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.169834][ T3583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.197805][ T3302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 34.223509][ T3302] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 34.236637][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.280979][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.288409][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.295912][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.314176][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.321646][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.329392][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.336796][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.344209][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.351675][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.359128][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.372756][ T3381] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 34.460720][ T3616] loop0: detected capacity change from 0 to 1024 [ 34.484621][ T3616] EXT4-fs: Ignoring removed orlov option [ 34.498397][ T3613] fido_id[3613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.551357][ T3616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.578688][ T3395] tipc: Node number set to 1 [ 34.595592][ T3616] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 34.817760][ T3628] loop3: detected capacity change from 0 to 512 [ 34.845680][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.859353][ T3628] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.909851][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.993618][ T3637] loop2: detected capacity change from 0 to 512 [ 35.030128][ T3637] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.048664][ T3637] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.049056][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.061777][ T3637] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.092145][ T3637] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.109254][ T3637] EXT4-fs (loop2): 1 truncate cleaned up [ 35.118119][ T3637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.172146][ T3610] syz.0.51 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 35.186222][ T3610] CPU: 0 UID: 0 PID: 3610 Comm: syz.0.51 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 35.186259][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.186272][ T3610] Call Trace: [ 35.186279][ T3610] [ 35.186292][ T3610] __dump_stack+0x1d/0x30 [ 35.186342][ T3610] dump_stack_lvl+0xe8/0x140 [ 35.186361][ T3610] dump_stack+0x15/0x1b [ 35.186378][ T3610] dump_header+0x81/0x220 [ 35.186409][ T3610] oom_kill_process+0x342/0x400 [ 35.186442][ T3610] out_of_memory+0x979/0xb80 [ 35.186492][ T3610] try_charge_memcg+0x5e6/0x9e0 [ 35.186521][ T3610] obj_cgroup_charge_pages+0xa6/0x150 [ 35.186553][ T3610] __memcg_kmem_charge_page+0x9f/0x170 [ 35.186607][ T3610] __alloc_frozen_pages_noprof+0x188/0x360 [ 35.186643][ T3610] alloc_pages_mpol+0xb3/0x250 [ 35.186677][ T3610] alloc_pages_noprof+0x90/0x130 [ 35.186738][ T3610] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 35.186818][ T3610] __kvmalloc_node_noprof+0x30f/0x4e0 [ 35.186906][ T3610] ? ip_set_alloc+0x1f/0x30 [ 35.186936][ T3610] ? ip_set_alloc+0x1f/0x30 [ 35.186965][ T3610] ? __kmalloc_cache_noprof+0x189/0x320 [ 35.187014][ T3610] ip_set_alloc+0x1f/0x30 [ 35.187043][ T3610] hash_netiface_create+0x282/0x740 [ 35.187087][ T3610] ? __pfx_hash_netiface_create+0x10/0x10 [ 35.187118][ T3610] ip_set_create+0x3cc/0x960 [ 35.187145][ T3610] ? __nla_parse+0x40/0x60 [ 35.187171][ T3610] nfnetlink_rcv_msg+0x4c6/0x590 [ 35.187217][ T3610] netlink_rcv_skb+0x120/0x220 [ 35.187236][ T3610] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 35.187338][ T3610] nfnetlink_rcv+0x16b/0x1690 [ 35.187402][ T3610] ? nlmon_xmit+0x4f/0x60 [ 35.187426][ T3610] ? consume_skb+0x49/0x150 [ 35.187455][ T3610] ? nlmon_xmit+0x4f/0x60 [ 35.187478][ T3610] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 35.187500][ T3610] ? __dev_queue_xmit+0x1200/0x2000 [ 35.187578][ T3610] ? __dev_queue_xmit+0x182/0x2000 [ 35.187600][ T3610] ? ref_tracker_free+0x37d/0x3e0 [ 35.187626][ T3610] ? __netlink_deliver_tap+0x4dc/0x500 [ 35.187682][ T3610] netlink_unicast+0x5c0/0x690 [ 35.187769][ T3610] netlink_sendmsg+0x58b/0x6b0 [ 35.187792][ T3610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.187841][ T3610] __sock_sendmsg+0x145/0x180 [ 35.187888][ T3610] ____sys_sendmsg+0x31e/0x4e0 [ 35.187911][ T3610] ___sys_sendmsg+0x17b/0x1d0 [ 35.187959][ T3610] __x64_sys_sendmsg+0xd4/0x160 [ 35.187982][ T3610] x64_sys_call+0x191e/0x2ff0 [ 35.188002][ T3610] do_syscall_64+0xd2/0x200 [ 35.188026][ T3610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.188123][ T3610] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.188147][ T3610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.188170][ T3610] RIP: 0033:0x7f38c34debe9 [ 35.188192][ T3610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.188210][ T3610] RSP: 002b:00007f38c1f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.188275][ T3610] RAX: ffffffffffffffda RBX: 00007f38c3705fa0 RCX: 00007f38c34debe9 [ 35.188350][ T3610] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 35.188364][ T3610] RBP: 00007f38c3561e19 R08: 0000000000000000 R09: 0000000000000000 [ 35.188378][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.188476][ T3610] R13: 00007f38c3706038 R14: 00007f38c3705fa0 R15: 00007ffd7a580c78 [ 35.188523][ T3610] [ 35.188530][ T3610] memory: usage 307200kB, limit 307200kB, failcnt 235 [ 35.528241][ T3610] memory+swap: usage 307788kB, limit 9007199254740988kB, failcnt 0 [ 35.536134][ T3610] kmem: usage 298812kB, limit 9007199254740988kB, failcnt 0 [ 35.543429][ T3610] Memory cgroup stats for /syz0: [ 35.543760][ T3610] cache 77824 [ 35.544700][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.548730][ T3610] rss 8507392 [ 35.564366][ T3610] shmem 0 [ 35.567293][ T3610] mapped_file 65536 [ 35.571198][ T3610] dirty 12288 [ 35.574474][ T3610] writeback 0 [ 35.577768][ T3610] workingset_refault_anon 41 [ 35.582414][ T3610] workingset_refault_file 64 [ 35.587094][ T3610] swap 602112 [ 35.590407][ T3610] swapcached 114688 [ 35.594199][ T3610] pgpgin 2809 [ 35.597473][ T3610] pgpgout 712 [ 35.600870][ T3610] pgfault 2744 [ 35.604235][ T3610] pgmajfault 9 [ 35.607620][ T3610] inactive_anon 0 [ 35.611297][ T3610] active_anon 4096 [ 35.615012][ T3610] inactive_file 0 [ 35.618674][ T3610] active_file 12288 [ 35.622585][ T3610] unevictable 8572928 [ 35.626627][ T3610] hierarchical_memory_limit 314572800 [ 35.632022][ T3610] hierarchical_memsw_limit 9223372036854771712 [ 35.638164][ T3610] total_cache 77824 [ 35.641998][ T3610] total_rss 8507392 [ 35.645813][ T3610] total_shmem 0 [ 35.649281][ T3610] total_mapped_file 65536 [ 35.653619][ T3610] total_dirty 12288 [ 35.657412][ T3610] total_writeback 0 [ 35.661227][ T3610] total_workingset_refault_anon 41 [ 35.666352][ T3610] total_workingset_refault_file 64 [ 35.671523][ T3610] total_swap 602112 [ 35.675316][ T3610] total_swapcached 114688 [ 35.679651][ T3610] total_pgpgin 2809 [ 35.683521][ T3610] total_pgpgout 712 [ 35.687310][ T3610] total_pgfault 2744 [ 35.691228][ T3610] total_pgmajfault 9 [ 35.695110][ T3610] total_inactive_anon 0 [ 35.699290][ T3610] total_active_anon 4096 [ 35.703519][ T3610] total_inactive_file 0 [ 35.707669][ T3610] total_active_file 12288 [ 35.712062][ T3610] total_unevictable 8572928 [ 35.716546][ T3610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.51,pid=3608,uid=0 [ 35.731148][ T3610] Memory cgroup out of memory: Killed process 3608 (syz.0.51) total-vm:95740kB, anon-rss:9132kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 35.924764][ T3610] syz.0.51 (3610) used greatest stack depth: 6224 bytes left [ 35.937359][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.001902][ T3670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 36.024785][ T3674] loop1: detected capacity change from 0 to 764 [ 36.048277][ T3674] Symlink component flag not implemented [ 36.054715][ T3674] Symlink component flag not implemented (101) [ 36.170799][ T3692] loop1: detected capacity change from 0 to 128 [ 36.181091][ T3694] loop0: detected capacity change from 0 to 128 [ 36.191635][ T3692] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 36.210423][ T3692] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.242129][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.276726][ T3694] syz.0.84: attempt to access beyond end of device [ 36.276726][ T3694] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 36.290485][ T3694] syz.0.84: attempt to access beyond end of device [ 36.290485][ T3694] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 36.304079][ T3694] syz.0.84: attempt to access beyond end of device [ 36.304079][ T3694] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 36.328560][ T3694] syz.0.84: attempt to access beyond end of device [ 36.328560][ T3694] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 36.344209][ T3694] syz.0.84: attempt to access beyond end of device [ 36.344209][ T3694] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 36.351250][ T3701] syzkaller0: entered allmulticast mode [ 36.368049][ T3694] syz.0.84: attempt to access beyond end of device [ 36.368049][ T3694] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 36.372329][ T3701] syzkaller0: entered promiscuous mode [ 36.382654][ T3694] syz.0.84: attempt to access beyond end of device [ 36.382654][ T3694] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 36.403874][ T3694] syz.0.84: attempt to access beyond end of device [ 36.403874][ T3694] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 36.404440][ T3701] syzkaller0 (unregistering): left allmulticast mode [ 36.423929][ T3701] syzkaller0 (unregistering): left promiscuous mode [ 36.527144][ T3708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 36.561922][ T3710] loop0: detected capacity change from 0 to 512 [ 36.572223][ T3710] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.595887][ T3710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 36.605898][ T3710] System zones: 1-12 [ 36.615641][ T3710] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.90: corrupted in-inode xattr: e_value size too large [ 36.641772][ T3710] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.90: couldn't read orphan inode 15 (err -117) [ 36.668548][ C0] hrtimer: interrupt took 27457 ns [ 36.668582][ T3710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.725731][ T3710] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.90: Unrecognised inode hash code 4 [ 36.736928][ T3710] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.90: Corrupt directory, running e2fsck is recommended [ 36.786404][ T3714] mmap: syz.1.91 (3714) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.800737][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.839078][ T3724] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.968772][ T3731] pim6reg1: entered promiscuous mode [ 36.974118][ T3731] pim6reg1: entered allmulticast mode [ 37.070416][ T3737] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 37.113664][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 37.113676][ T29] audit: type=1400 audit(1755169440.361:258): avc: denied { name_bind } for pid=3740 comm="syz.0.103" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.190246][ T29] audit: type=1400 audit(1755169440.435:259): avc: denied { sqpoll } for pid=3745 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.216147][ T3743] tipc: Started in network mode [ 37.221057][ T3743] tipc: Node identity 0a6e8538be3d, cluster identity 4711 [ 37.228343][ T3743] tipc: Enabled bearer , priority 0 [ 37.276396][ T3742] tipc: Resetting bearer [ 37.285636][ T29] audit: type=1400 audit(1755169440.527:260): avc: denied { read } for pid=3749 comm="syz.2.106" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.308292][ T29] audit: type=1400 audit(1755169440.527:261): avc: denied { open } for pid=3749 comm="syz.2.106" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.331336][ T29] audit: type=1400 audit(1755169440.527:262): avc: denied { connect } for pid=3749 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 37.357216][ T3742] tipc: Disabling bearer [ 37.467985][ T29] audit: type=1400 audit(1755169440.592:263): avc: denied { write } for pid=3749 comm="syz.2.106" path="socket:[5482]" dev="sockfs" ino=5482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 37.541970][ T29] audit: type=1326 audit(1755169440.740:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec7b55ba7 code=0x7ffc0000 [ 37.565293][ T29] audit: type=1326 audit(1755169440.740:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec7afadd9 code=0x7ffc0000 [ 37.588664][ T29] audit: type=1326 audit(1755169440.740:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec7b55ba7 code=0x7ffc0000 [ 37.612034][ T29] audit: type=1326 audit(1755169440.740:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec7afadd9 code=0x7ffc0000 [ 37.701660][ T3808] loop3: detected capacity change from 0 to 512 [ 37.715941][ T3816] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.741014][ T3808] EXT4-fs: Ignoring removed nobh option [ 37.758083][ T3808] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.109: corrupted inode contents [ 37.771269][ T3825] loop2: detected capacity change from 0 to 128 [ 37.780017][ T3808] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.109: mark_inode_dirty error [ 37.792452][ T3808] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.109: corrupted inode contents [ 37.808311][ T3816] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.822930][ T3808] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.109: mark_inode_dirty error [ 37.835344][ T3808] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.109: Failed to acquire dquot type 0 [ 37.847487][ T3808] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.109: corrupted inode contents [ 37.862850][ T3808] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.109: mark_inode_dirty error [ 37.875011][ T3808] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.109: corrupted inode contents [ 37.888837][ T3808] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.109: mark_inode_dirty error [ 37.902326][ T3808] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.109: corrupted inode contents [ 37.916915][ T3808] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 37.936135][ T3816] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.950393][ T3808] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.109: corrupted inode contents [ 37.964229][ T3808] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.109: mark_inode_dirty error [ 37.976682][ T3808] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 37.994284][ T3830] loop2: detected capacity change from 0 to 512 [ 38.002891][ T3816] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.029131][ T3830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.068040][ T3830] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.083832][ T3808] EXT4-fs (loop3): 1 truncate cleaned up [ 38.089970][ T3808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.115993][ T3801] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.124252][ T3801] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.150202][ T3808] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.163003][ T3801] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.172932][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.182182][ T3801] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.272161][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.315227][ T3848] loop4: detected capacity change from 0 to 128 [ 38.427315][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 38.459520][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 38.469847][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 38.490006][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 38.515605][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 38.578984][ T3874] loop3: detected capacity change from 0 to 512 [ 38.603557][ T3874] EXT4-fs (loop3): too many log groups per flexible block group [ 38.611293][ T3874] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 38.624883][ T3874] EXT4-fs (loop3): mount failed [ 38.724775][ T3861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.784257][ T3882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 38.817350][ T3861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.906814][ T3861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.954515][ T3884] loop3: detected capacity change from 0 to 128 [ 38.981769][ T3861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.013725][ T3886] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 39.026801][ T3886] team0: Port device dummy0 added [ 39.057323][ T3886] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 39.074844][ T3886] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 39.105669][ T3886] team0: Failed to send options change via netlink (err -105) [ 39.115571][ T3886] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 39.136851][ T3886] team0: Port device dummy0 removed [ 39.153479][ T3886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.328839][ T3898] loop1: detected capacity change from 0 to 128 [ 39.338799][ T3898] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.351539][ T3889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.372540][ T3898] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.372869][ T3806] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.393163][ T3806] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.416501][ T3891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.433577][ T3763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460143][ T3789] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.479957][ T3891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.532393][ T3909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 39.543455][ T3891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.556162][ T3909] netlink: 256 bytes leftover after parsing attributes in process `syz.1.147'. [ 39.586141][ T3913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 39.624297][ T3891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.648325][ T3915] loop3: detected capacity change from 0 to 8192 [ 39.684120][ T3919] loop1: detected capacity change from 0 to 512 [ 39.692935][ T3919] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.712620][ T3789] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.731448][ T3789] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.755122][ T3789] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.764091][ T3919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.783960][ T3789] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.792935][ T3919] EXT4-fs (loop1): 1 truncate cleaned up [ 39.798979][ T3919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.941208][ T3937] loop2: detected capacity change from 0 to 512 [ 39.969623][ T3937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.022147][ T3937] EXT4-fs (loop2): 1 truncate cleaned up [ 40.031734][ T3937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.079470][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.324614][ T3965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 40.467958][ T3974] tipc: Enabled bearer , priority 0 [ 40.492055][ T3806] tipc: Resetting bearer [ 40.521858][ T3968] tipc: Resetting bearer [ 40.536642][ T3968] tipc: Disabling bearer [ 40.552225][ T3976] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.650546][ T3976] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.685806][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.716829][ T3976] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.770301][ T3976] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.603301][ T4027] loop1: detected capacity change from 0 to 1024 [ 41.612857][ T4027] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 41.634671][ T4027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.771108][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.856311][ T4055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.092372][ T4077] syz.2.209 uses obsolete (PF_INET,SOCK_PACKET) [ 42.832295][ T4086] loop4: detected capacity change from 0 to 1024 [ 42.850053][ T4086] EXT4-fs: Ignoring removed orlov option [ 42.948035][ T4086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.977669][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 42.977682][ T29] audit: type=1400 audit(1755169445.770:460): avc: denied { append } for pid=4091 comm="syz.3.217" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.042157][ T4086] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 43.085152][ T29] audit: type=1400 audit(1755169445.862:461): avc: denied { ioctl } for pid=4095 comm="syz.3.219" path="socket:[6981]" dev="sockfs" ino=6981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.166090][ T4101] netlink: 'syz.3.221': attribute type 30 has an invalid length. [ 43.276923][ T29] audit: type=1400 audit(1755169446.056:462): avc: denied { create } for pid=4102 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.296221][ T29] audit: type=1400 audit(1755169446.056:463): avc: denied { setopt } for pid=4102 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.315450][ T29] audit: type=1400 audit(1755169446.056:464): avc: denied { connect } for pid=4102 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.370823][ T4085] syz.4.215 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.383926][ T4107] loop3: detected capacity change from 0 to 164 [ 43.384928][ T4085] CPU: 1 UID: 0 PID: 4085 Comm: syz.4.215 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 43.384958][ T4085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.384971][ T4085] Call Trace: [ 43.384990][ T4085] [ 43.384998][ T4085] __dump_stack+0x1d/0x30 [ 43.385019][ T4085] dump_stack_lvl+0xe8/0x140 [ 43.385038][ T4085] dump_stack+0x15/0x1b [ 43.385055][ T4085] dump_header+0x81/0x220 [ 43.385086][ T4085] oom_kill_process+0x342/0x400 [ 43.385144][ T4085] out_of_memory+0x979/0xb80 [ 43.385176][ T4085] try_charge_memcg+0x5e6/0x9e0 [ 43.385204][ T4085] obj_cgroup_charge_pages+0xa6/0x150 [ 43.385243][ T4085] __memcg_kmem_charge_page+0x9f/0x170 [ 43.385281][ T4085] __alloc_frozen_pages_noprof+0x188/0x360 [ 43.385316][ T4085] alloc_pages_mpol+0xb3/0x250 [ 43.385449][ T4085] alloc_pages_noprof+0x90/0x130 [ 43.385480][ T4085] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 43.385520][ T4085] __kvmalloc_node_noprof+0x30f/0x4e0 [ 43.385597][ T4085] ? ip_set_alloc+0x1f/0x30 [ 43.385671][ T4085] ? ip_set_alloc+0x1f/0x30 [ 43.385699][ T4085] ? __kmalloc_cache_noprof+0x189/0x320 [ 43.385756][ T4085] ip_set_alloc+0x1f/0x30 [ 43.385784][ T4085] hash_netiface_create+0x282/0x740 [ 43.385815][ T4085] ? __pfx_hash_netiface_create+0x10/0x10 [ 43.385903][ T4085] ip_set_create+0x3cc/0x960 [ 43.386003][ T4085] ? __nla_parse+0x40/0x60 [ 43.386027][ T4085] nfnetlink_rcv_msg+0x4c6/0x590 [ 43.386071][ T4085] netlink_rcv_skb+0x120/0x220 [ 43.386090][ T4085] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 43.386214][ T4085] nfnetlink_rcv+0x16b/0x1690 [ 43.386243][ T4085] ? nlmon_xmit+0x4f/0x60 [ 43.386268][ T4085] ? consume_skb+0x49/0x150 [ 43.386298][ T4085] ? nlmon_xmit+0x4f/0x60 [ 43.386389][ T4085] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 43.386412][ T4085] ? __dev_queue_xmit+0x1200/0x2000 [ 43.386432][ T4085] ? __dev_queue_xmit+0x182/0x2000 [ 43.386486][ T4085] ? ref_tracker_free+0x37d/0x3e0 [ 43.386512][ T4085] ? __netlink_deliver_tap+0x4dc/0x500 [ 43.386614][ T4085] netlink_unicast+0x5c0/0x690 [ 43.386690][ T4085] netlink_sendmsg+0x58b/0x6b0 [ 43.386712][ T4085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.386791][ T4085] __sock_sendmsg+0x145/0x180 [ 43.386817][ T4085] ____sys_sendmsg+0x31e/0x4e0 [ 43.386847][ T4085] ___sys_sendmsg+0x17b/0x1d0 [ 43.386879][ T4085] __x64_sys_sendmsg+0xd4/0x160 [ 43.386928][ T4085] x64_sys_call+0x191e/0x2ff0 [ 43.386949][ T4085] do_syscall_64+0xd2/0x200 [ 43.386975][ T4085] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.386999][ T4085] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.387022][ T4085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.387066][ T4085] RIP: 0033:0x7f9aeee8ebe9 [ 43.387081][ T4085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.387098][ T4085] RSP: 002b:00007f9aed8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.387117][ T4085] RAX: ffffffffffffffda RBX: 00007f9aef0b5fa0 RCX: 00007f9aeee8ebe9 [ 43.387150][ T4085] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 43.387162][ T4085] RBP: 00007f9aeef11e19 R08: 0000000000000000 R09: 0000000000000000 [ 43.387175][ T4085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.387187][ T4085] R13: 00007f9aef0b6038 R14: 00007f9aef0b5fa0 R15: 00007ffc8d2fa898 [ 43.387205][ T4085] [ 43.387212][ T4085] memory: usage 307200kB, limit 307200kB, failcnt 320 [ 43.471829][ T4107] Unsupported NM flag settings (8) [ 43.472882][ T4085] memory+swap: usage 307776kB, limit 9007199254740988kB, failcnt 0 [ 43.472897][ T4085] kmem: usage 298780kB, limit 9007199254740988kB, failcnt 0 [ 43.472953][ T4085] Memory cgroup stats for /syz4 [ 43.498556][ T29] audit: type=1400 audit(1755169446.185:465): avc: denied { mount } for pid=4106 comm="syz.3.224" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.503550][ T4085] : [ 43.507798][ T29] audit: type=1400 audit(1755169446.241:466): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.513484][ T4085] cache 86016 [ 43.802593][ T4085] rss 8531968 [ 43.805893][ T4085] shmem 0 [ 43.808802][ T4085] mapped_file 81920 [ 43.812604][ T4085] dirty 77824 [ 43.815865][ T4085] writeback 0 [ 43.819186][ T4085] workingset_refault_anon 16 [ 43.823763][ T4085] workingset_refault_file 379 [ 43.828412][ T4085] swap 589824 [ 43.831669][ T4085] swapcached 110592 [ 43.835485][ T4085] pgpgin 7885 [ 43.838741][ T4085] pgpgout 5780 [ 43.842098][ T4085] pgfault 10515 [ 43.845545][ T4085] pgmajfault 8 [ 43.848887][ T4085] inactive_anon 0 [ 43.852499][ T4085] active_anon 0 [ 43.855960][ T4085] inactive_file 8192 [ 43.859840][ T4085] active_file 0 [ 43.863275][ T4085] unevictable 8613888 [ 43.867246][ T4085] hierarchical_memory_limit 314572800 [ 43.872604][ T4085] hierarchical_memsw_limit 9223372036854771712 [ 43.878760][ T4085] total_cache 86016 [ 43.882538][ T4085] total_rss 8531968 [ 43.886417][ T4085] total_shmem 0 [ 43.889870][ T4085] total_mapped_file 81920 [ 43.894172][ T4085] total_dirty 77824 [ 43.897949][ T4085] total_writeback 0 [ 43.901747][ T4085] total_workingset_refault_anon 16 [ 43.906829][ T4085] total_workingset_refault_file 379 [ 43.912019][ T4085] total_swap 589824 [ 43.915942][ T4085] total_swapcached 110592 [ 43.920338][ T4085] total_pgpgin 7885 [ 43.924160][ T4085] total_pgpgout 5780 [ 43.928028][ T4085] total_pgfault 10515 [ 43.932001][ T4085] total_pgmajfault 8 [ 43.935874][ T4085] total_inactive_anon 0 [ 43.940073][ T4085] total_active_anon 0 [ 43.944081][ T4085] total_inactive_file 8192 [ 43.948546][ T4085] total_active_file 0 [ 43.952567][ T4085] total_unevictable 8613888 [ 43.957146][ T4085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.215,pid=4084,uid=0 [ 43.971654][ T4085] Memory cgroup out of memory: Killed process 4084 (syz.4.215) total-vm:95944kB, anon-rss:9392kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 44.107403][ T29] audit: type=1326 audit(1755169446.822:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7b5ebe9 code=0x7ffc0000 [ 44.130699][ T29] audit: type=1326 audit(1755169446.822:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7b5ebe9 code=0x7ffc0000 [ 44.155250][ T29] audit: type=1326 audit(1755169446.868:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ec7b5ebe9 code=0x7ffc0000 [ 44.196978][ T4122] loop1: detected capacity change from 0 to 1024 [ 44.208963][ T4122] EXT4-fs: Ignoring removed bh option [ 44.216086][ T4122] EXT4-fs: inline encryption not supported [ 44.222766][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.246200][ T4122] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.258796][ T3777] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.267062][ T3777] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.278440][ T4122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 44.299383][ T4122] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.231: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.313414][ T3777] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.331553][ T3777] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.339963][ T4122] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.231: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.354328][ T4122] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.231: Failed to acquire dquot type 0 [ 44.366658][ T4122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 44.376859][ T4122] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.231: mark_inode_dirty error [ 44.400341][ T3763] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.411922][ T4122] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 44.445191][ T4122] EXT4-fs (loop1): 1 orphan inode deleted [ 44.455280][ T4122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.467866][ T3789] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.483000][ T3763] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.493719][ T4130] loop3: detected capacity change from 0 to 128 [ 44.494704][ T3789] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0 [ 44.501096][ T4130] msdos: Unknown parameter '' [ 44.554386][ T4130] __nla_validate_parse: 4 callbacks suppressed [ 44.554401][ T4130] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.233'. [ 44.571055][ T3763] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.627075][ T3763] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.768643][ T3763] bridge_slave_1: left allmulticast mode [ 44.774303][ T3763] bridge_slave_1: left promiscuous mode [ 44.780174][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.794283][ T3763] bridge_slave_0: left allmulticast mode [ 44.800033][ T3763] bridge_slave_0: left promiscuous mode [ 44.805702][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.910358][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.933480][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.948955][ T3763] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 44.963778][ T3763] bond0 (unregistering): Released all slaves [ 45.005733][ T4138] chnl_net:caif_netlink_parms(): no params data found [ 45.040204][ T3763] hsr_slave_0: left promiscuous mode [ 45.047537][ T3763] hsr_slave_1: left promiscuous mode [ 45.053272][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.060697][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.068533][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.075962][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.109543][ T3763] veth1_macvtap: left promiscuous mode [ 45.115517][ T3763] veth0_macvtap: left promiscuous mode [ 45.121099][ T3763] veth1_vlan: left promiscuous mode [ 45.127239][ T3763] veth0_vlan: left promiscuous mode [ 45.205366][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 45.216082][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 45.336274][ T4138] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.343595][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.372781][ T4138] bridge_slave_0: entered allmulticast mode [ 45.379843][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.380488][ T4138] bridge_slave_0: entered promiscuous mode [ 45.396243][ T3302] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.409199][ T3302] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.421270][ T4138] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.428415][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.447424][ T4138] bridge_slave_1: entered allmulticast mode [ 45.453931][ T4138] bridge_slave_1: entered promiscuous mode [ 45.456716][ T3302] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 45.554485][ T4138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.580715][ T4138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.639537][ T4138] team0: Port device team_slave_0 added [ 45.663428][ T4138] team0: Port device team_slave_1 added [ 45.711547][ T4138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.718543][ T4138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.744536][ T4138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.792932][ T4138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.799984][ T4138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.826372][ T4138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.889006][ T4138] hsr_slave_0: entered promiscuous mode [ 45.895157][ T4138] hsr_slave_1: entered promiscuous mode [ 45.901292][ T4138] debugfs: 'hsr0' already exists in 'hsr' [ 45.907126][ T4138] Cannot create hsr debugfs directory [ 45.952617][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 45.970225][ T4237] loop1: detected capacity change from 0 to 2048 [ 46.026336][ T4242] netlink: 104 bytes leftover after parsing attributes in process `syz.4.254'. [ 46.034494][ T3540] loop1: p3 p4 < > [ 46.039930][ T3540] loop1: p3 size 57344 extends beyond EOD, truncated [ 46.061257][ T4237] loop1: p3 p4 < > [ 46.066197][ T4237] loop1: p3 size 57344 extends beyond EOD, truncated [ 46.090348][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.097410][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.115934][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 46.128443][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 46.132177][ T4180] bridge_slave_0: entered allmulticast mode [ 46.145693][ T4180] bridge_slave_0: entered promiscuous mode [ 46.158137][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 46.176159][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 46.177438][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.192968][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.203428][ T4180] bridge_slave_1: entered allmulticast mode [ 46.212097][ T4180] bridge_slave_1: entered promiscuous mode [ 46.251361][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.266962][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.291197][ T4266] netlink: 148 bytes leftover after parsing attributes in process `syz.0.258'. [ 46.291449][ T4180] team0: Port device team_slave_0 added [ 46.319652][ T4180] team0: Port device team_slave_1 added [ 46.342652][ T4138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.363635][ T4138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.392885][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.399839][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.425796][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.447917][ T4138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.471690][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.479816][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.506651][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.520701][ T4138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.528666][ T4294] 9pnet: p9_errstr2errno: server reported unknown error [ 46.576990][ T4180] hsr_slave_0: entered promiscuous mode [ 46.583013][ T4180] hsr_slave_1: entered promiscuous mode [ 46.590761][ T4180] debugfs: 'hsr0' already exists in 'hsr' [ 46.596480][ T4180] Cannot create hsr debugfs directory [ 46.625312][ T4138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.664707][ T4138] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.699474][ T4310] netlink: 52 bytes leftover after parsing attributes in process `syz.0.262'. [ 46.729503][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.736599][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.772596][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.779692][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.868962][ T4327] batman_adv: batadv0: Adding interface: dummy0 [ 46.875259][ T4327] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.920614][ T4327] batman_adv: batadv0: Interface activated: dummy0 [ 46.951480][ T4180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.979546][ T4180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.992042][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 46.996349][ T4138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.026343][ T4180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.042548][ T4180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.061765][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.084306][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.229303][ T4372] uprobe: syz.4.270:4372 failed to unregister, leaking uprobe [ 47.244352][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.302755][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.312669][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.319714][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.340249][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.347403][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.437082][ T4138] veth0_vlan: entered promiscuous mode [ 47.464262][ T4138] veth1_vlan: entered promiscuous mode [ 47.494429][ T4138] veth0_macvtap: entered promiscuous mode [ 47.509831][ T4138] veth1_macvtap: entered promiscuous mode [ 47.525851][ T3801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.536244][ T3801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.563495][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.577299][ T4138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.584300][ T4404] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.605125][ T3801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.615527][ T3801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.651441][ T4395] netlink: 830 bytes leftover after parsing attributes in process `syz.0.273'. [ 47.660858][ T4395] bond_slave_0: entered promiscuous mode [ 47.666708][ T4395] bond_slave_1: entered promiscuous mode [ 47.674849][ T4138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.682303][ T4411] loop1: detected capacity change from 0 to 1024 [ 47.696933][ T4411] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.707842][ T4411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.721099][ T4411] JBD2: no valid journal superblock found [ 47.726865][ T4411] EXT4-fs (loop1): Could not load journal inode [ 47.734160][ T4409] bridge: RTM_NEWNEIGH with invalid ether address [ 47.747227][ T3763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.757696][ T4411] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 47.768237][ T3801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.778625][ T3801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.829309][ T4421] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 47.830417][ T3763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.881215][ T3801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.891635][ T3801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.970840][ T3763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.979885][ T4430] bond1: entered promiscuous mode [ 47.985022][ T4430] bond1: entered allmulticast mode [ 47.993176][ T4430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.008826][ T4439] ip6gretap1: entered promiscuous mode [ 48.014502][ T4439] ip6gretap1: entered allmulticast mode [ 48.020799][ T4439] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 48.029951][ T3763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.099414][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 48.103145][ T3760] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 48.126252][ T3801] bridge_slave_1: left allmulticast mode [ 48.131917][ T3801] bridge_slave_1: left promiscuous mode [ 48.137721][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.155931][ T3801] bridge_slave_0: left allmulticast mode [ 48.162198][ T3801] bridge_slave_0: left promiscuous mode [ 48.167830][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.232820][ T3760] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 48.300036][ T3801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.309543][ T3801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.318994][ T3801] bond0 (unregistering): Released all slaves [ 48.330399][ T4458] sch_fq: defrate 4294967295 ignored. [ 48.360565][ T4180] veth0_vlan: entered promiscuous mode [ 48.380719][ T3801] hsr_slave_0: left promiscuous mode [ 48.389674][ T3801] hsr_slave_1: left promiscuous mode [ 48.395475][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.402968][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.411699][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.419171][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.429695][ T3801] veth1_macvtap: left promiscuous mode [ 48.436504][ T3801] veth0_macvtap: left promiscuous mode [ 48.442415][ T3801] veth1_vlan: left promiscuous mode [ 48.447688][ T3801] veth0_vlan: left promiscuous mode [ 48.492119][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 48.519722][ T3801] team0 (unregistering): Port device team_slave_1 removed [ 48.529908][ T3801] team0 (unregistering): Port device team_slave_0 removed [ 48.570294][ T4180] veth1_vlan: entered promiscuous mode [ 48.600059][ T4180] veth0_macvtap: entered promiscuous mode [ 48.609127][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 48.609141][ T29] audit: type=1400 audit(1755169450.976:590): avc: denied { name_connect } for pid=4493 comm="syz.0.294" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 48.624347][ T4180] veth1_macvtap: entered promiscuous mode [ 48.650888][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.662350][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.682230][ T3811] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.691016][ T3811] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.705442][ T3811] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.723334][ T3789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.771890][ T4510] 9pnet: p9_errstr2errno: server reported unknown error [ 48.796184][ T29] audit: type=1400 audit(1755169451.142:591): avc: denied { execute } for pid=4513 comm="syz.0.297" path="/57/cpuset.memory_pressure_enabled" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.919751][ T4531] team0 (unregistering): Port device team_slave_0 removed [ 48.936020][ T4531] team0 (unregistering): Port device team_slave_1 removed [ 48.947775][ T29] audit: type=1326 audit(1755169451.290:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 48.971541][ T29] audit: type=1326 audit(1755169451.290:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.078056][ T29] audit: type=1326 audit(1755169451.336:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.101428][ T29] audit: type=1326 audit(1755169451.336:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.124663][ T29] audit: type=1326 audit(1755169451.336:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.148165][ T29] audit: type=1326 audit(1755169451.345:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.171447][ T29] audit: type=1326 audit(1755169451.345:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.194741][ T29] audit: type=1326 audit(1755169451.345:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c34debe9 code=0x7ffc0000 [ 49.290457][ T4565] wg2: entered promiscuous mode [ 49.295533][ T4565] wg2: entered allmulticast mode [ 49.416409][ T4583] loop5: detected capacity change from 0 to 164 [ 49.464912][ T4583] bio_check_eod: 98 callbacks suppressed [ 49.464926][ T4583] syz.5.312: attempt to access beyond end of device [ 49.464926][ T4583] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 49.490425][ T4583] syz.5.312: attempt to access beyond end of device [ 49.490425][ T4583] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 49.627415][ T4595] netlink: 830 bytes leftover after parsing attributes in process `syz.5.314'. [ 49.637777][ T4595] bond_slave_0: entered promiscuous mode [ 49.643929][ T4595] bond_slave_1: entered promiscuous mode [ 49.873997][ T4630] bridge: RTM_NEWNEIGH with invalid ether address [ 49.888261][ T4626] pim6reg1: entered promiscuous mode [ 49.893810][ T4626] pim6reg1: entered allmulticast mode [ 49.945292][ T4640] ip6gre1: entered allmulticast mode [ 50.005581][ T4645] loop1: detected capacity change from 0 to 512 [ 50.074818][ T4645] loop1: detected capacity change from 512 to 64 [ 50.082781][ T4645] FAT-fs (loop1): Directory bread(block 34) failed [ 50.090708][ T4645] FAT-fs (loop1): Directory bread(block 35) failed [ 50.100021][ T4656] loop4: detected capacity change from 0 to 512 [ 50.108334][ T4645] FAT-fs (loop1): Directory bread(block 36) failed [ 50.114844][ T4645] FAT-fs (loop1): Directory bread(block 37) failed [ 50.125491][ T4656] ext4: Unknown parameter 'euid>00000000000000000000' [ 50.135477][ T4645] FAT-fs (loop1): Directory bread(block 38) failed [ 50.146420][ T4645] FAT-fs (loop1): Directory bread(block 39) failed [ 50.157320][ T4645] FAT-fs (loop1): Directory bread(block 40) failed [ 50.167721][ T4656] __nla_validate_parse: 2 callbacks suppressed [ 50.167731][ T4656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.328'. [ 50.188975][ T4645] FAT-fs (loop1): Directory bread(block 41) failed [ 50.323695][ T3302] FAT-fs (loop1): Directory bread(block 34) failed [ 50.334642][ T3302] FAT-fs (loop1): Directory bread(block 35) failed [ 50.414215][ T4673] tipc: Started in network mode [ 50.419125][ T4673] tipc: Node identity 7ac73570d32d, cluster identity 4711 [ 50.426386][ T4673] tipc: Enabled bearer , priority 0 [ 50.451432][ T4670] tipc: Resetting bearer [ 50.484910][ T4670] tipc: Disabling bearer [ 50.908773][ T4703] chnl_net:caif_netlink_parms(): no params data found [ 50.958063][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.965297][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.972652][ T4703] bridge_slave_0: entered allmulticast mode [ 50.981894][ T4703] bridge_slave_0: entered promiscuous mode [ 50.989181][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.996492][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.004942][ T4703] bridge_slave_1: entered allmulticast mode [ 51.011484][ T4703] bridge_slave_1: entered promiscuous mode [ 51.033420][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.051579][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.079930][ T4703] team0: Port device team_slave_0 added [ 51.099037][ T4703] team0: Port device team_slave_1 added [ 51.116197][ T4736] loop6: detected capacity change from 0 to 512 [ 51.123990][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.131079][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.157066][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.168409][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.175427][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.201559][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.224457][ T4736] loop6: detected capacity change from 512 to 64 [ 51.224557][ T4737] syz.6.346: attempt to access beyond end of device [ 51.224557][ T4737] loop6: rw=524288, sector=140, nr_sectors = 4 limit=64 [ 51.245641][ T4737] syz.6.346: attempt to access beyond end of device [ 51.245641][ T4737] loop6: rw=0, sector=140, nr_sectors = 4 limit=64 [ 51.258816][ T4737] FAT-fs (loop6): Directory bread(block 35) failed [ 51.261653][ T4703] hsr_slave_0: entered promiscuous mode [ 51.265353][ T4737] FAT-fs (loop6): Directory bread(block 36) failed [ 51.271467][ T4703] hsr_slave_1: entered promiscuous mode [ 51.280173][ T4737] FAT-fs (loop6): Directory bread(block 37) failed [ 51.289804][ T4737] FAT-fs (loop6): Directory bread(block 38) failed [ 51.296379][ T4737] FAT-fs (loop6): Directory bread(block 39) failed [ 51.300935][ T4703] debugfs: 'hsr0' already exists in 'hsr' [ 51.304101][ T4737] FAT-fs (loop6): Directory bread(block 40) failed [ 51.308607][ T4703] Cannot create hsr debugfs directory [ 51.315137][ T4737] FAT-fs (loop6): Directory bread(block 41) failed [ 51.408075][ T4703] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 51.417769][ T4703] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 51.427137][ T4703] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 51.436227][ T4703] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 51.471261][ T4180] FAT-fs (loop6): Directory bread(block 34) failed [ 51.484337][ T4180] FAT-fs (loop6): Directory bread(block 35) failed [ 51.490912][ T4180] FAT-fs (loop6): Directory bread(block 36) failed [ 51.504619][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.540819][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.551631][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.558692][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.582545][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.589603][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.707980][ T3811] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.758418][ T3811] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.790907][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.846614][ T3811] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.950776][ T3811] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.982193][ T4786] loop5: detected capacity change from 0 to 512 [ 52.085681][ T4762] chnl_net:caif_netlink_parms(): no params data found [ 52.092952][ T4786] loop5: detected capacity change from 512 to 64 [ 52.108665][ T4805] FAT-fs (loop5): Directory bread(block 34) failed [ 52.143054][ T4805] FAT-fs (loop5): Directory bread(block 35) failed [ 52.149730][ T4805] FAT-fs (loop5): Directory bread(block 36) failed [ 52.156975][ T4805] FAT-fs (loop5): Directory bread(block 37) failed [ 52.165750][ T4805] FAT-fs (loop5): Directory bread(block 38) failed [ 52.166395][ T4703] veth0_vlan: entered promiscuous mode [ 52.172351][ T4805] FAT-fs (loop5): Directory bread(block 39) failed [ 52.184376][ T4805] FAT-fs (loop5): Directory bread(block 40) failed [ 52.191069][ T4805] FAT-fs (loop5): Directory bread(block 41) failed [ 52.207570][ T3811] bridge_slave_1: left allmulticast mode [ 52.213262][ T3811] bridge_slave_1: left promiscuous mode [ 52.218890][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.232946][ T3811] bridge_slave_0: left allmulticast mode [ 52.238640][ T3811] bridge_slave_0: left promiscuous mode [ 52.244526][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.337072][ T4138] FAT-fs (loop5): Directory bread(block 34) failed [ 52.345154][ T4138] FAT-fs (loop5): Directory bread(block 35) failed [ 52.357589][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.388566][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.403568][ T3811] bond0 (unregistering): Released all slaves [ 52.442871][ T4703] veth1_vlan: entered promiscuous mode [ 52.472916][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.480106][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.504693][ T4762] bridge_slave_0: entered allmulticast mode [ 52.521865][ T4762] bridge_slave_0: entered promiscuous mode [ 52.530617][ T3811] hsr_slave_0: left promiscuous mode [ 52.538524][ T3811] hsr_slave_1: left promiscuous mode [ 52.544134][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.551600][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.573439][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.581014][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.605370][ T3811] veth1_macvtap: left promiscuous mode [ 52.613780][ T3811] veth0_macvtap: left promiscuous mode [ 52.619409][ T3811] veth1_vlan: left promiscuous mode [ 52.625640][ T3811] veth0_vlan: left promiscuous mode [ 52.762186][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.769366][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.776990][ T4762] bridge_slave_1: entered allmulticast mode [ 52.783556][ T4762] bridge_slave_1: entered promiscuous mode [ 52.803985][ T4703] veth0_macvtap: entered promiscuous mode [ 52.836020][ T4703] veth1_macvtap: entered promiscuous mode [ 52.871020][ T4762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.895399][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.904318][ T4762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.958849][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.967897][ T4762] team0: Port device team_slave_0 added [ 52.974421][ T4762] team0: Port device team_slave_1 added [ 52.989306][ T3760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.016298][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.023297][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.049254][ T4762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.101088][ T3760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.116045][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.123053][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.149040][ T4762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.210829][ T3760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.259495][ T3760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.280016][ T4762] hsr_slave_0: entered promiscuous mode [ 53.289224][ T4762] hsr_slave_1: entered promiscuous mode [ 53.295687][ T4762] debugfs: 'hsr0' already exists in 'hsr' [ 53.301418][ T4762] Cannot create hsr debugfs directory [ 53.316536][ T4870] team0 (unregistering): Port device team_slave_0 removed [ 53.326254][ T4870] team0 (unregistering): Port device team_slave_1 removed [ 53.484298][ T3811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.588312][ T3811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.627999][ T4834] chnl_net:caif_netlink_parms(): no params data found [ 53.659715][ T4908] loop4: detected capacity change from 0 to 1024 [ 53.681368][ T4908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.695290][ T3811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.748221][ T4908] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.378: Allocating blocks 449-513 which overlap fs metadata [ 53.768073][ T4762] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 53.796775][ T4762] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 53.812675][ T4762] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 53.826080][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.833204][ T4834] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.840626][ T4834] bridge_slave_0: entered allmulticast mode [ 53.847414][ T4834] bridge_slave_0: entered promiscuous mode [ 53.854179][ T4834] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.861072][ T4907] EXT4-fs (loop4): pa ffff888107928690: logic 48, phys. 177, len 21 [ 53.861371][ T4834] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.869334][ T4907] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 53.876774][ T4834] bridge_slave_1: entered allmulticast mode [ 53.906907][ T4834] bridge_slave_1: entered promiscuous mode [ 53.924380][ T3811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.939457][ T4762] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 54.015623][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.026981][ T4834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.072676][ T4834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.205137][ T4943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.212489][ T4943] IPv6: NLM_F_CREATE should be set when creating new route [ 54.242549][ T4834] team0: Port device team_slave_0 added [ 54.257924][ T4834] team0: Port device team_slave_1 added [ 54.280966][ T3811] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.323496][ T4834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.330697][ T4834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.356833][ T4834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.396235][ T3811] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.408687][ T4834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.415679][ T4834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.441909][ T4834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.457764][ T4762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.488705][ T3811] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.531782][ T4834] hsr_slave_0: entered promiscuous mode [ 54.541488][ T4834] hsr_slave_1: entered promiscuous mode [ 54.549687][ T4834] debugfs: 'hsr0' already exists in 'hsr' [ 54.555423][ T4834] Cannot create hsr debugfs directory [ 54.573836][ T3811] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.628790][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.691208][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 54.691262][ T29] audit: type=1400 audit(1755169456.597:795): avc: denied { read } for pid=4976 comm="syz.4.389" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.720726][ T29] audit: type=1400 audit(1755169456.597:796): avc: denied { open } for pid=4976 comm="syz.4.389" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.753943][ T4762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.764395][ T4762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.813325][ T29] audit: type=1400 audit(1755169456.643:797): avc: denied { ioctl } for pid=4976 comm="syz.4.389" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.898683][ T29] audit: type=1326 audit(1755169456.781:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 54.922057][ T29] audit: type=1326 audit(1755169456.781:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 54.993879][ T29] audit: type=1326 audit(1755169456.828:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 55.017208][ T29] audit: type=1326 audit(1755169456.828:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 55.040475][ T29] audit: type=1326 audit(1755169456.828:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 55.063781][ T29] audit: type=1326 audit(1755169456.837:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 55.087008][ T29] audit: type=1326 audit(1755169456.837:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.7.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 55.117305][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.124418][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.138173][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.145265][ T3789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.189091][ T3811] bridge_slave_1: left allmulticast mode [ 55.194804][ T3811] bridge_slave_1: left promiscuous mode [ 55.200590][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.219754][ T3811] bridge_slave_0: left allmulticast mode [ 55.225592][ T3811] bridge_slave_0: left promiscuous mode [ 55.231364][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.249816][ T3811] bridge_slave_1: left allmulticast mode [ 55.255703][ T3811] bridge_slave_1: left promiscuous mode [ 55.261411][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.269425][ T3811] bridge_slave_0: left allmulticast mode [ 55.275122][ T3811] bridge_slave_0: left promiscuous mode [ 55.280893][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.291004][ T3811] bond_slave_0: left promiscuous mode [ 55.296479][ T3811] bond_slave_1: left promiscuous mode [ 55.310262][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'. [ 55.319270][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'. [ 55.337026][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'. [ 55.346156][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'. [ 55.368930][ T3811] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 55.376528][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'. [ 55.379349][ T3811] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 55.386437][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'. [ 55.406472][ T3811] ip6gretap1 (unregistering): left promiscuous mode [ 55.413074][ T3811] ip6gretap1 (unregistering): left allmulticast mode [ 55.474741][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.485182][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.494898][ T3811] bond0 (unregistering): Released all slaves [ 55.504067][ T3811] bond1 (unregistering): Released all slaves [ 55.570085][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.579970][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.591829][ T3811] bond0 (unregistering): Released all slaves [ 55.650345][ T4762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.683863][ T3811] tipc: Left network mode [ 55.709040][ T3811] hsr_slave_0: left promiscuous mode [ 55.715831][ T3811] hsr_slave_1: left promiscuous mode [ 55.726940][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.734645][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.766400][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.773902][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.799136][ T3811] hsr_slave_0: left promiscuous mode [ 55.804801][ T3811] hsr_slave_1: left promiscuous mode [ 55.812463][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.819961][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.827528][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.834997][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.849685][ T3811] veth1_macvtap: left promiscuous mode [ 55.855280][ T3811] veth0_macvtap: left promiscuous mode [ 55.860897][ T3811] veth1_vlan: left promiscuous mode [ 55.866175][ T3811] veth0_vlan: left promiscuous mode [ 55.872444][ T3811] veth1_macvtap: left promiscuous mode [ 55.877980][ T3811] veth0_macvtap: left promiscuous mode [ 55.883908][ T3811] veth1_vlan: left promiscuous mode [ 55.889203][ T3811] veth0_vlan: left promiscuous mode [ 56.049152][ T3811] team0 (unregistering): Port device team_slave_1 removed [ 56.065165][ T3811] team0 (unregistering): Port device team_slave_0 removed [ 56.173238][ T3811] team0 (unregistering): Port device team_slave_1 removed [ 56.191083][ T3811] team0 (unregistering): Port device team_slave_0 removed [ 56.286058][ T4834] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 56.306314][ T4834] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 56.315713][ T4834] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 56.320004][ T5046] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 56.331037][ T5046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.404'. [ 56.332863][ T4834] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 56.363580][ T5046] dummy0: entered promiscuous mode [ 56.380736][ T5046] bond0: (slave dummy0): Releasing backup interface [ 56.410668][ T5046] bridge0: port 3(dummy0) entered blocking state [ 56.417600][ T5046] bridge0: port 3(dummy0) entered disabled state [ 56.424778][ T5046] dummy0: entered allmulticast mode [ 56.497506][ T4834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.544343][ T4834] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.569025][ T4762] veth0_vlan: entered promiscuous mode [ 56.580048][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.587180][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.609591][ T3763] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.616656][ T3763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.633617][ T4762] veth1_vlan: entered promiscuous mode [ 56.659351][ T4834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.685091][ T4762] veth0_macvtap: entered promiscuous mode [ 56.695590][ T4762] veth1_macvtap: entered promiscuous mode [ 56.732202][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.749639][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.777072][ T3763] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.801105][ T3763] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.812156][ T4834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.830167][ T3763] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.859352][ T3763] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.039100][ T4834] veth0_vlan: entered promiscuous mode [ 57.060514][ T4834] veth1_vlan: entered promiscuous mode [ 57.089580][ T4834] veth0_macvtap: entered promiscuous mode [ 57.099405][ T4834] veth1_macvtap: entered promiscuous mode [ 57.124436][ T4834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.142395][ T4834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.153528][ T3760] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175551][ T3760] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.204008][ T3760] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.228246][ T3760] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303057][ T5195] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.423'. [ 57.312241][ T5195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 57.697773][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.705008][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.748840][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.758167][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.795668][ T3811] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.834252][ T3811] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.855902][ T3811] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.875814][ T3811] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.886846][ T5263] loop7: detected capacity change from 0 to 1024 [ 57.901949][ T5262] netlink: 'syz.9.438': attribute type 10 has an invalid length. [ 57.912056][ T5262] netlink: 40 bytes leftover after parsing attributes in process `syz.9.438'. [ 57.923400][ T5262] dummy0: entered promiscuous mode [ 57.932295][ T5262] bridge0: port 3(dummy0) entered blocking state [ 57.938196][ T5263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.938903][ T5262] bridge0: port 3(dummy0) entered disabled state [ 57.958941][ T5262] dummy0: entered allmulticast mode [ 58.003515][ T5263] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.439: Allocating blocks 449-513 which overlap fs metadata [ 58.057860][ T5261] EXT4-fs (loop7): pa ffff888107a260e0: logic 48, phys. 177, len 21 [ 58.066069][ T5261] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 58.128069][ T4703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.198870][ T5306] netlink: 96 bytes leftover after parsing attributes in process `syz.7.443'. [ 58.311162][ T5324] netlink: 'syz.7.451': attribute type 12 has an invalid length. [ 58.375810][ T5335] loop9: detected capacity change from 0 to 1024 [ 58.398778][ T5335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.450750][ T5335] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.454: Allocating blocks 449-513 which overlap fs metadata [ 58.516443][ T5333] EXT4-fs (loop9): pa ffff888107a26150: logic 48, phys. 177, len 21 [ 58.524469][ T5333] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 58.545666][ T4834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.562254][ T5356] loop4: detected capacity change from 0 to 256 [ 58.578962][ T5356] vfat: Unknown parameter '18446744073709551615)՝"' [ 58.645591][ T5366] pim6reg1: entered promiscuous mode [ 58.651071][ T5366] pim6reg1: entered allmulticast mode [ 58.830396][ T5402] netlink: 'syz.0.468': attribute type 30 has an invalid length. [ 58.914268][ T5415] pim6reg1: entered promiscuous mode [ 58.919688][ T5415] pim6reg1: entered allmulticast mode [ 59.222879][ T5452] loop4: detected capacity change from 0 to 1024 [ 59.262294][ T5452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.287382][ T5448] loop8: detected capacity change from 0 to 164 [ 59.330182][ T5448] Unable to read rock-ridge attributes [ 59.364444][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.532001][ T5448] Unable to read rock-ridge attributes [ 59.553251][ T5448] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.294451][ T5560] loop7: detected capacity change from 0 to 1024 [ 60.308520][ T5560] EXT4-fs: Ignoring removed orlov option [ 60.336849][ T5560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.433312][ T5576] netlink: 'syz.0.489': attribute type 4 has an invalid length. [ 60.450565][ T5576] netlink: 'syz.0.489': attribute type 4 has an invalid length. [ 60.462476][ T4703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.543964][ T5581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.647247][ T5593] pimreg: entered allmulticast mode [ 60.678995][ T5593] pimreg: left allmulticast mode [ 60.688099][ T5595] netlink: 'syz.8.496': attribute type 10 has an invalid length. [ 60.700623][ T5595] team0: Port device dummy0 added [ 60.712239][ T5595] netlink: 'syz.8.496': attribute type 10 has an invalid length. [ 60.720790][ T5595] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 60.731555][ T5595] team0: Failed to send options change via netlink (err -105) [ 60.754058][ T5595] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 60.764736][ T5595] team0: Port device dummy0 removed [ 60.774852][ T5595] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.846727][ T5604] netlink: 24 bytes leftover after parsing attributes in process `syz.9.499'. [ 60.891400][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 60.891415][ T29] audit: type=1400 audit(1755169462.310:1202): avc: denied { firmware_load } for pid=5605 comm="syz.9.501" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 61.059729][ T5613] loop4: detected capacity change from 0 to 1024 [ 61.102283][ T5613] EXT4-fs: Ignoring removed bh option [ 61.162860][ T5613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.217795][ T5613] IPv6: Can't replace route, no match found [ 61.267718][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.673616][ T29] audit: type=1326 audit(1755169463.030:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.674554][ T5635] pim6reg1: entered promiscuous mode [ 61.696997][ T29] audit: type=1326 audit(1755169463.030:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.702349][ T5635] pim6reg1: entered allmulticast mode [ 61.725662][ T29] audit: type=1326 audit(1755169463.030:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.725705][ T29] audit: type=1326 audit(1755169463.030:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.725728][ T29] audit: type=1326 audit(1755169463.030:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.725799][ T29] audit: type=1326 audit(1755169463.030:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.786103][ T29] audit: type=1326 audit(1755169463.086:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.848223][ T29] audit: type=1326 audit(1755169463.086:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192820ebe9 code=0x7ffc0000 [ 61.953005][ T29] audit: type=1326 audit(1755169463.178:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.7.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19282414a5 code=0x7ffc0000 [ 62.066501][ T5652] loop8: detected capacity change from 0 to 512 [ 62.110391][ T5652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.156091][ T5664] loop4: detected capacity change from 0 to 1024 [ 62.166962][ T5652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.183078][ T5652] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.200026][ T5652] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 62.210349][ T5664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.223881][ T5652] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 62.272586][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.318816][ T5664] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.521: Allocating blocks 449-513 which overlap fs metadata [ 62.365763][ T5664] SELinux: Context @ is not valid (left unmapped). [ 62.373396][ T5664] EXT4-fs (loop4): pa ffff8881079287e0: logic 48, phys. 177, len 21 [ 62.381571][ T5664] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 62.393281][ T5673] loop8: detected capacity change from 0 to 512 [ 62.403354][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.9.525'. [ 62.413268][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.428518][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.450274][ T5673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.463545][ T5673] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.504955][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.603996][ T5696] wg2: entered promiscuous mode [ 62.608896][ T5696] wg2: entered allmulticast mode [ 62.630173][ T5699] netlink: 'syz.9.534': attribute type 9 has an invalid length. [ 62.653783][ T5701] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.769410][ T5701] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.835631][ T5701] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.887032][ T5701] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.992565][ T3782] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.013102][ T3763] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.040412][ T3761] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.068023][ T3761] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.550969][ T5732] syzkaller0: entered promiscuous mode [ 63.556554][ T5732] syzkaller0: entered allmulticast mode [ 63.713248][ T5737] loop9: detected capacity change from 0 to 2048 [ 63.773890][ T3293] Alternate GPT is invalid, using primary GPT. [ 63.780365][ T3293] loop9: p1 p2 p3 [ 63.790170][ T5737] Alternate GPT is invalid, using primary GPT. [ 63.796603][ T5737] loop9: p1 p2 p3 [ 63.816004][ T2990] udevd[2990]: worker [3293] terminated by signal 33 (Unknown signal 33) [ 63.834246][ T2990] udevd[2990]: worker [3293] failed while handling '/devices/virtual/block/loop9' [ 63.860120][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 63.860212][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 63.873604][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 63.929228][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 63.943148][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 63.944041][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 64.141454][ T5766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.164201][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.440244][ T5779] loop8: detected capacity change from 0 to 1024 [ 64.447050][ T5779] EXT4-fs: Ignoring removed oldalloc option [ 64.453336][ T5779] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.474524][ T5779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.519026][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.558782][ T5786] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.616550][ T5786] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.654314][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 64.667134][ T5788] team1: entered promiscuous mode [ 64.675741][ T5788] team1: entered allmulticast mode [ 64.707780][ T5786] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.748582][ T5786] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.751745][ T5794] loop4: detected capacity change from 0 to 2048 [ 64.790783][ T5800] IPv4: Oversized IP packet from 127.202.26.0 [ 64.810975][ T5794] Alternate GPT is invalid, using primary GPT. [ 64.817250][ T5794] loop4: p1 p2 p3 [ 64.832441][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 64.846597][ T3784] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.909531][ T3764] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.937425][ T3762] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.954117][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 64.967294][ T3762] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.084547][ T5817] loop9: detected capacity change from 0 to 1024 [ 65.093118][ T5817] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 65.239132][ T5831] loop8: detected capacity change from 0 to 512 [ 65.252111][ T5831] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 65.284112][ T5831] EXT4-fs (loop8): 1 truncate cleaned up [ 65.290583][ T5831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.354052][ T5835] loop9: detected capacity change from 0 to 164 [ 65.371045][ T5835] rock: directory entry would overflow storage [ 65.377255][ T5835] rock: sig=0x66, size=4, remaining=3 [ 65.395157][ T5835] rock: directory entry would overflow storage [ 65.401332][ T5835] rock: sig=0x66, size=4, remaining=3 [ 66.130042][ T5850] loop4: detected capacity change from 0 to 512 [ 66.137618][ T5850] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 66.276714][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.294774][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.602'. [ 66.303752][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.315617][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.322862][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 66.322873][ T29] audit: type=1326 audit(1755169467.322:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.353070][ T29] audit: type=1326 audit(1755169467.359:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.376467][ T29] audit: type=1326 audit(1755169467.378:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.399928][ T29] audit: type=1326 audit(1755169467.405:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.423342][ T29] audit: type=1326 audit(1755169467.405:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.446707][ T29] audit: type=1326 audit(1755169467.414:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.470092][ T29] audit: type=1326 audit(1755169467.442:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.493395][ T29] audit: type=1326 audit(1755169467.451:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.516747][ T29] audit: type=1326 audit(1755169467.461:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 66.542311][ T29] audit: type=1326 audit(1755169467.470:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9aeee8ebe9 code=0x7ffc0000 [ 67.158272][ T5872] netlink: 'syz.4.606': attribute type 10 has an invalid length. [ 67.166346][ T5872] dummy0: left allmulticast mode [ 67.171947][ T5872] dummy0: left promiscuous mode [ 67.176959][ T5872] bridge0: port 3(dummy0) entered disabled state [ 67.185994][ T5872] team0: Port device dummy0 added [ 67.200600][ T5872] netlink: 'syz.4.606': attribute type 10 has an invalid length. [ 67.216148][ T5872] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.226966][ T5872] team0: Failed to send options change via netlink (err -105) [ 67.234432][ T5872] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.243708][ T5872] team0: Port device dummy0 removed [ 67.250677][ T5872] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.285868][ T5876] tipc: Enabled bearer , priority 0 [ 67.293875][ T5875] tipc: Resetting bearer [ 67.314354][ T5875] tipc: Disabling bearer [ 67.338354][ T5882] netlink: 96 bytes leftover after parsing attributes in process `syz.4.611'. [ 67.525572][ T5907] netlink: 'syz.7.622': attribute type 1 has an invalid length. [ 67.539248][ T5907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.556004][ T5907] vlan2: entered allmulticast mode [ 67.561159][ T5907] batadv0: entered allmulticast mode [ 67.568460][ T5907] bond1: (slave vlan2): making interface the new active one [ 67.578143][ T5907] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 67.667347][ T5912] wg2: entered promiscuous mode [ 67.672269][ T5912] wg2: entered allmulticast mode [ 68.494836][ T5947] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.563338][ T5947] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.599725][ T5952] loop7: detected capacity change from 0 to 512 [ 68.619806][ T5952] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 68.646137][ T5947] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.733098][ T5947] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.809569][ T3784] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.830357][ T3784] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841253][ T3784] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.849463][ T3784] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.569608][ T6068] ------------[ cut here ]------------ [ 69.575150][ T6068] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)(1) [ 69.592058][ T6068] WARNING: CPU: 1 PID: 6068 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 69.602409][ T6068] Modules linked in: [ 69.606284][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.4.667 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 69.618686][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.628804][ T6068] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 69.635119][ T6068] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 69.654823][ T6068] RSP: 0018:ffffc90010887440 EFLAGS: 00010292 [ 69.660890][ T6068] RAX: f6c0e8cc1d733d00 RBX: ffff88811a0260b8 RCX: 0000000000080000 [ 69.668892][ T6068] RDX: ffffc90002b3d000 RSI: 0000000000009e6d RDI: 0000000000009e6e [ 69.676968][ T6068] RBP: 0000000000000010 R08: 0001c9001088727f R09: 0000000000000000 [ 69.685131][ T6068] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a026078 [ 69.693103][ T6068] R13: ffff88811c2e0000 R14: ffff88811c2e0000 R15: ffff88811a0260b0 [ 69.701114][ T6068] FS: 00007f9aed8f76c0(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 69.710140][ T6068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.716842][ T6068] CR2: 0000001b33420ff8 CR3: 000000012e59a000 CR4: 00000000003506f0 [ 69.724905][ T6068] Call Trace: [ 69.728220][ T6068] [ 69.731149][ T6068] reg_set_min_max+0x1eb/0x260 [ 69.735934][ T6068] check_cond_jmp_op+0x1080/0x16e0 [ 69.741109][ T6068] do_check+0x332a/0x7a10 [ 69.745490][ T6068] do_check_common+0xc3a/0x12a0 [ 69.750391][ T6068] bpf_check+0x942b/0xd9e0 [ 69.754839][ T6068] ? __rcu_read_unlock+0x4f/0x70 [ 69.759894][ T6068] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 69.765938][ T6068] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 69.771695][ T6068] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 69.777613][ T6068] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 69.783748][ T6068] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 69.789826][ T6068] ? css_rstat_updated+0xb7/0x240 [ 69.794911][ T6068] ? __rcu_read_unlock+0x4f/0x70 [ 69.799872][ T6068] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 69.805729][ T6068] ? should_fail_ex+0x30/0x280 [ 69.810501][ T6068] ? selinux_bpf_prog_load+0x36/0xf0 [ 69.815803][ T6068] ? should_failslab+0x8c/0xb0 [ 69.820570][ T6068] ? __kmalloc_cache_noprof+0x189/0x320 [ 69.826152][ T6068] ? selinux_bpf_prog_load+0xbf/0xf0 [ 69.831443][ T6068] ? security_bpf_prog_load+0x2c/0xa0 [ 69.836933][ T6068] bpf_prog_load+0xedd/0x1070 [ 69.841668][ T6068] ? security_bpf+0x2b/0x90 [ 69.846194][ T6068] __sys_bpf+0x462/0x7b0 [ 69.850473][ T6068] __x64_sys_bpf+0x41/0x50 [ 69.854899][ T6068] x64_sys_call+0x2aea/0x2ff0 [ 69.859675][ T6068] do_syscall_64+0xd2/0x200 [ 69.864245][ T6068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.870355][ T6068] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.876080][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.882017][ T6068] RIP: 0033:0x7f9aeee8ebe9 [ 69.886496][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.906136][ T6068] RSP: 002b:00007f9aed8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.914601][ T6068] RAX: ffffffffffffffda RBX: 00007f9aef0b5fa0 RCX: 00007f9aeee8ebe9 [ 69.922579][ T6068] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 69.930656][ T6068] RBP: 00007f9aeef11e19 R08: 0000000000000000 R09: 0000000000000000 [ 69.938659][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.946653][ T6068] R13: 00007f9aef0b6038 R14: 00007f9aef0b5fa0 R15: 00007ffc8d2fa898 [ 69.954676][ T6068] [ 69.957782][ T6068] ---[ end trace 0000000000000000 ]--- [ 70.165665][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 70.333379][ T6128] SELinux: Context : is not valid (left unmapped). [ 70.451789][ T6139] : renamed from vlan0 (while UP) [ 71.410119][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.7.698'. [ 71.445455][ T6178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.454337][ T6181] loop9: detected capacity change from 0 to 512 [ 71.467437][ T6178] vlan3: entered allmulticast mode [ 71.472625][ T6178] bond2: entered allmulticast mode [ 71.480625][ T6181] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.514249][ T6181] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 71.565572][ T6181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 71.591512][ T6181] System zones: 1-12 [ 71.605629][ T6181] EXT4-fs (loop9): 1 truncate cleaned up [ 71.615140][ T6181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.880482][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 71.880497][ T29] audit: type=1400 audit(1755169472.454:1819): avc: denied { kexec_image_load } for pid=6194 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 71.937808][ T4834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.186136][ T29] audit: type=1400 audit(1755169472.731:1820): avc: denied { getopt } for pid=6203 comm="syz.9.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.223994][ T6206] loop9: detected capacity change from 0 to 1024 [ 72.233199][ T6206] EXT4-fs: Ignoring removed orlov option [ 72.246243][ T6206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.848877][ T6206] ================================================================== [ 72.856974][ T6206] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 72.864076][ T6206] [ 72.866391][ T6206] write to 0xffff888119cdadfc of 4 bytes by task 6210 on cpu 0: [ 72.874013][ T6206] xas_set_mark+0x12b/0x140 [ 72.878521][ T6206] __folio_start_writeback+0x1dd/0x440 [ 72.883994][ T6206] ext4_bio_write_folio+0x5ad/0x9f0 [ 72.889204][ T6206] mpage_process_page_bufs+0x4a1/0x620 [ 72.894659][ T6206] mpage_prepare_extent_to_map+0x786/0xc00 [ 72.900476][ T6206] ext4_do_writepages+0x708/0x2750 [ 72.905591][ T6206] ext4_writepages+0x176/0x300 [ 72.910354][ T6206] do_writepages+0x1c6/0x310 [ 72.914945][ T6206] file_write_and_wait_range+0x156/0x2c0 [ 72.920586][ T6206] generic_buffers_fsync_noflush+0x45/0x120 [ 72.926485][ T6206] ext4_sync_file+0x1ab/0x690 [ 72.931175][ T6206] vfs_fsync_range+0x10a/0x130 [ 72.935949][ T6206] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.941509][ T6206] ext4_file_write_iter+0x383/0xf00 [ 72.946716][ T6206] iter_file_splice_write+0x669/0x9e0 [ 72.952086][ T6206] direct_splice_actor+0x156/0x2a0 [ 72.957197][ T6206] splice_direct_to_actor+0x312/0x680 [ 72.962576][ T6206] do_splice_direct+0xda/0x150 [ 72.967341][ T6206] do_sendfile+0x380/0x650 [ 72.971758][ T6206] __x64_sys_sendfile64+0x105/0x150 [ 72.976962][ T6206] x64_sys_call+0x2bb0/0x2ff0 [ 72.981632][ T6206] do_syscall_64+0xd2/0x200 [ 72.986139][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.992034][ T6206] [ 72.994354][ T6206] read to 0xffff888119cdadfc of 4 bytes by task 6206 on cpu 1: [ 73.001888][ T6206] xas_find_marked+0x5dc/0x620 [ 73.006664][ T6206] find_get_entry+0x5d/0x380 [ 73.011260][ T6206] filemap_get_folios_tag+0x92/0x210 [ 73.016546][ T6206] mpage_prepare_extent_to_map+0x320/0xc00 [ 73.022358][ T6206] ext4_do_writepages+0x708/0x2750 [ 73.027491][ T6206] ext4_writepages+0x176/0x300 [ 73.032257][ T6206] do_writepages+0x1c6/0x310 [ 73.036853][ T6206] file_write_and_wait_range+0x156/0x2c0 [ 73.042485][ T6206] generic_buffers_fsync_noflush+0x45/0x120 [ 73.048374][ T6206] ext4_sync_file+0x1ab/0x690 [ 73.053066][ T6206] vfs_fsync_range+0x10a/0x130 [ 73.057845][ T6206] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.063405][ T6206] ext4_file_write_iter+0x383/0xf00 [ 73.068615][ T6206] iter_file_splice_write+0x669/0x9e0 [ 73.073995][ T6206] direct_splice_actor+0x156/0x2a0 [ 73.079109][ T6206] splice_direct_to_actor+0x312/0x680 [ 73.084476][ T6206] do_splice_direct+0xda/0x150 [ 73.089238][ T6206] do_sendfile+0x380/0x650 [ 73.093653][ T6206] __x64_sys_sendfile64+0x105/0x150 [ 73.098851][ T6206] x64_sys_call+0x2bb0/0x2ff0 [ 73.103528][ T6206] do_syscall_64+0xd2/0x200 [ 73.108031][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.113918][ T6206] [ 73.116233][ T6206] value changed: 0x0a000021 -> 0x04000021 [ 73.121940][ T6206] [ 73.124257][ T6206] Reported by Kernel Concurrency Sanitizer on: [ 73.130409][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.9.708 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 73.144305][ T6206] Tainted: [W]=WARN [ 73.148100][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.158141][ T6206] ================================================================== [ 73.185756][ T4834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.