last executing test programs: 3m19.843937673s ago: executing program 32 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.207523741s ago: executing program 33 (id=4988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 1m12.99855634s ago: executing program 5 (id=5328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 1m12.981671671s ago: executing program 5 (id=5329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r0}, &(0x7f0000000400), &(0x7f0000003700)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) 1m12.966231523s ago: executing program 5 (id=5330): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1m12.942789094s ago: executing program 5 (id=5331): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) fallocate(r0, 0x0, 0x4000, 0x1001f0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x40000000, 0xffffffff, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x9, 0x0, 0xc]}}) r1 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x59) 1m12.882321839s ago: executing program 5 (id=5332): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1m12.568750825s ago: executing program 5 (id=5337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 1m12.547358866s ago: executing program 34 (id=5337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 54.483891166s ago: executing program 2 (id=5925): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 54.479594597s ago: executing program 2 (id=5927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 54.43694198s ago: executing program 2 (id=5929): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x1000000000000000) 54.420899141s ago: executing program 2 (id=5931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 54.383615624s ago: executing program 2 (id=5934): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 54.291160222s ago: executing program 2 (id=5938): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 54.290890252s ago: executing program 35 (id=5938): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 42.644236887s ago: executing program 7 (id=6340): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a50", 0x86}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 42.625876268s ago: executing program 7 (id=6341): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9800, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) 42.586507691s ago: executing program 7 (id=6342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 42.557304534s ago: executing program 7 (id=6344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 42.513226767s ago: executing program 7 (id=6346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000380), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 42.422351745s ago: executing program 7 (id=6347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = io_uring_setup(0x78c4, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 42.422116195s ago: executing program 36 (id=6347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = io_uring_setup(0x78c4, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 32.39430091s ago: executing program 9 (id=6678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 32.331268675s ago: executing program 9 (id=6683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 32.279997389s ago: executing program 9 (id=6686): socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 32.176900657s ago: executing program 9 (id=6694): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 32.13968637s ago: executing program 9 (id=6697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 31.912353839s ago: executing program 9 (id=6705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 31.847610914s ago: executing program 37 (id=6705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 17.036023933s ago: executing program 3 (id=7098): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_ct={0x34, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16.94883494s ago: executing program 3 (id=7107): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x2, 0x3, 0x8000000, 0x56fd, 0x3]}, &(0x7f0000000100)=0x54) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffffe}, {0x0}, &(0x7f0000000140)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 16.900162814s ago: executing program 3 (id=7108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1ffffffe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 16.778501353s ago: executing program 3 (id=7110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 16.778081183s ago: executing program 3 (id=7111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 16.522520334s ago: executing program 3 (id=7115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 16.513495155s ago: executing program 38 (id=7115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 2.930831365s ago: executing program 8 (id=7519): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.898270918s ago: executing program 8 (id=7522): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x2000101c}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xeb, 0x0, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.192967244s ago: executing program 6 (id=7537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa1"], 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.113761071s ago: executing program 6 (id=7539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8, 0x1b}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaaf}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.990045801s ago: executing program 8 (id=7544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000040000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x34, r3, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 1.957956073s ago: executing program 8 (id=7546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 1.847873152s ago: executing program 8 (id=7553): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.716490293s ago: executing program 6 (id=7554): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, 0x2, 0x5, 0x2}, 0x14) 1.650496518s ago: executing program 6 (id=7555): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.593208873s ago: executing program 6 (id=7557): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 1.516187159s ago: executing program 6 (id=7558): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x8a28, 0x2476}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 679.052966ms ago: executing program 8 (id=7570): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) ptrace(0x10, r0) 555.516445ms ago: executing program 0 (id=7574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 494.356791ms ago: executing program 0 (id=7576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8, 0x1b}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaaf}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 493.936171ms ago: executing program 1 (id=7577): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 426.041746ms ago: executing program 1 (id=7578): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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") socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 393.435749ms ago: executing program 1 (id=7579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 374.119961ms ago: executing program 1 (id=7580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) 148.126809ms ago: executing program 0 (id=7581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 145.249189ms ago: executing program 1 (id=7593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 131.45103ms ago: executing program 0 (id=7582): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f0000000080)=[{r0, 0xa006}], 0x1, 0x0, 0x0, 0x0) 131.15838ms ago: executing program 4 (id=7583): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 113.155071ms ago: executing program 0 (id=7584): unshare(0x20000400) r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 112.092741ms ago: executing program 1 (id=7597): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 111.530162ms ago: executing program 4 (id=7585): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x800) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 67.718055ms ago: executing program 4 (id=7587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) 42.800547ms ago: executing program 4 (id=7588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 42.190337ms ago: executing program 0 (id=7589): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 482.79µs ago: executing program 4 (id=7590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r2, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 0s ago: executing program 4 (id=7592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): 78.843551][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.850727][T16285] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.858076][T16285] bridge_slave_1: entered allmulticast mode [ 178.864611][T16285] bridge_slave_1: entered promiscuous mode [ 178.947278][T16285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.972536][T16285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.022697][T16285] team0: Port device team_slave_0 added [ 179.034529][T16285] team0: Port device team_slave_1 added [ 179.074361][T16285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.081382][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.107592][T16285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.175006][T16285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.182283][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.208437][T16285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.287869][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5357'. [ 179.299267][T16285] hsr_slave_0: entered promiscuous mode [ 179.305763][T16285] hsr_slave_1: entered promiscuous mode [ 179.312009][T16285] debugfs: 'hsr0' already exists in 'hsr' [ 179.317964][T16285] Cannot create hsr debugfs directory [ 179.324650][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5357'. [ 179.324756][ T4058] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.351579][ T4058] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.395667][ T4058] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.412357][ T4058] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.426158][ T29] kauditd_printk_skb: 800 callbacks suppressed [ 179.426171][ T29] audit: type=1400 audit(179.406:8348): avc: denied { lock } for pid=16350 comm="syz.6.5365" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.497952][ T29] audit: type=1400 audit(179.476:8349): avc: denied { create } for pid=16358 comm="syz.6.5368" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.504229][T16285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 179.520427][T16361] 9pnet_fd: Insufficient options for proto=fd [ 179.541168][ T29] audit: type=1400 audit(179.506:8350): avc: denied { mounton } for pid=16358 comm="syz.6.5368" path="/47/file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.572153][T16285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 179.589486][T16285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 179.600028][ T29] audit: type=1400 audit(179.576:8351): avc: denied { unlink } for pid=15481 comm="syz-executor" name="file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.624798][T16285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 179.666177][T16385] netlink: 'syz.6.5377': attribute type 13 has an invalid length. [ 179.766761][T16385] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.774317][T16385] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.873954][T16385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.891130][T16385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.987545][T16380] lo speed is unknown, defaulting to 1000 [ 180.006832][ T4054] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.045525][ T4054] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.060580][ T4054] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.088707][T16285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.106505][T16397] lo speed is unknown, defaulting to 1000 [ 180.117862][ T4054] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.137847][T16285] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.246922][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.254079][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.265525][ T29] audit: type=1400 audit(180.246:8352): avc: denied { read } for pid=16421 comm="syz.4.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.269257][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.291705][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.311235][T16285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.321685][T16285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.356135][ T29] audit: type=1326 audit(180.336:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16429 comm="syz.1.5393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83982bebe9 code=0x0 [ 180.376751][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.417842][ T29] audit: type=1400 audit(180.396:8354): avc: denied { read } for pid=16440 comm="syz.2.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.457516][ T29] audit: type=1400 audit(180.436:8355): avc: granted { setsecparam } for pid=16446 comm="syz.2.5396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 180.502670][ T29] audit: type=1400 audit(180.486:8356): avc: denied { shutdown } for pid=16452 comm="syz.2.5397" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.549561][T16285] veth0_vlan: entered promiscuous mode [ 180.559589][T16285] veth1_vlan: entered promiscuous mode [ 180.580933][T16285] veth0_macvtap: entered promiscuous mode [ 180.590604][T16285] veth1_macvtap: entered promiscuous mode [ 180.603377][T16285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.615306][T16285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.626853][ T1015] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.637599][ T1015] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.648493][ T1015] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.660296][ T1015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.702190][ T29] audit: type=1326 audit(180.676:8357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.7.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 181.138439][T16549] lo speed is unknown, defaulting to 1000 [ 181.168011][T16559] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 181.223454][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5404'. [ 181.234791][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5404'. [ 181.297326][T16582] macvtap1: entered allmulticast mode [ 181.302891][T16582] bridge0: entered allmulticast mode [ 181.312235][T16582] bridge0: port 3(macvtap1) entered blocking state [ 181.319001][T16582] bridge0: port 3(macvtap1) entered disabled state [ 181.327981][T16582] bridge0: left allmulticast mode [ 181.615345][T16635] netlink: 'syz.4.5423': attribute type 13 has an invalid length. [ 181.696743][T16635] gretap0: refused to change device tx_queue_len [ 181.769242][T16635] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.906654][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5434'. [ 181.915712][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5434'. [ 181.933796][T16663] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.948810][T16665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5436'. [ 181.972804][T16665] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 182.085395][T16686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16686 comm=syz.7.5443 [ 182.113348][T16686] netlink: 'syz.7.5443': attribute type 1 has an invalid length. [ 182.271052][T16695] geneve2: entered promiscuous mode [ 182.276446][T16695] geneve2: entered allmulticast mode [ 182.298293][ T4035] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.330757][ T4035] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.341460][ T4035] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.350411][ T4035] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.993350][T16740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16740 comm=syz.4.5465 [ 183.014911][T16740] netlink: 'syz.4.5465': attribute type 1 has an invalid length. [ 183.036584][T16740] bond3: (slave bridge2): making interface the new active one [ 183.046577][T16740] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 183.050327][T16399] Process accounting resumed [ 183.099350][T16750] netlink: 'syz.6.5468': attribute type 13 has an invalid length. [ 183.117960][T16750] gretap0: refused to change device tx_queue_len [ 183.126560][T16750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.344068][T16763] ªªªªªª: renamed from bond_slave_0 [ 183.502182][T16776] lo speed is unknown, defaulting to 1000 [ 183.717483][T16800] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5492'. [ 184.232171][T16810] syzkaller0: entered promiscuous mode [ 184.237791][T16810] syzkaller0: entered allmulticast mode [ 184.246213][T16807] lo speed is unknown, defaulting to 1000 [ 184.376399][T16831] netlink: 'syz.2.5505': attribute type 13 has an invalid length. [ 184.703170][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 184.703215][ T29] audit: type=1326 audit(184.686:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.2.5513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64d6c0ebe9 code=0x0 [ 184.707065][T16851] lo speed is unknown, defaulting to 1000 [ 184.709988][ T29] audit: type=1400 audit(184.686:8646): avc: denied { write } for pid=16853 comm="syz.7.5514" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.767373][T16854] geneve0: entered allmulticast mode [ 184.773383][T16854] geneve0: entered promiscuous mode [ 184.779097][T16855] vhci_hcd: invalid port number 96 [ 184.784334][T16855] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 184.799763][ T29] audit: type=1400 audit(184.756:8647): avc: denied { map } for pid=16853 comm="syz.7.5514" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.972976][T16852] geneve0: left promiscuous mode [ 184.978010][T16852] geneve0: left allmulticast mode [ 185.012303][ T29] audit: type=1400 audit(184.996:8648): avc: denied { bind } for pid=16867 comm="syz.6.5519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.075154][T16874] netlink: 'syz.4.5522': attribute type 13 has an invalid length. [ 185.125004][T16879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.152994][T16879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.205334][T16879] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 185.339356][ T4055] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.360226][ T4055] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.369036][ T4055] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.377703][ T4055] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.458648][T16893] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5531'. [ 185.468238][T16893] netlink: zone id is out of range [ 185.473382][T16893] netlink: zone id is out of range [ 185.478713][T16893] netlink: del zone limit has 8 unknown bytes [ 185.668415][T16910] netlink: 'syz.1.5537': attribute type 13 has an invalid length. [ 185.790958][ T3707] Process accounting resumed [ 185.816062][ T29] audit: type=1400 audit(185.796:8649): avc: denied { listen } for pid=16919 comm="syz.4.5543" lport=45422 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.847624][ T3693] lo speed is unknown, defaulting to 1000 [ 185.853394][ T3693] syz0: Port: 1 Link DOWN [ 185.857929][ T4055] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.859491][ T29] audit: type=1400 audit(185.826:8650): avc: denied { accept } for pid=16919 comm="syz.4.5543" lport=45422 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.888911][ T29] audit: type=1400 audit(185.826:8651): avc: denied { write } for pid=16919 comm="syz.4.5543" lport=45422 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 185.892794][ T4055] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.912096][ T29] audit: type=1400 audit(185.826:8652): avc: denied { setopt } for pid=16919 comm="syz.4.5543" lport=45422 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 186.021600][T16926] syzkaller0: entered promiscuous mode [ 186.027088][T16926] syzkaller0: entered allmulticast mode [ 186.053510][ T4055] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.062898][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5547'. [ 186.084747][ T4055] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.127713][T16933] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 186.256325][T16957] rdma_rxe: rxe_newlink: failed to add syz_tun [ 186.262893][ T29] audit: type=1400 audit(186.236:8653): avc: denied { create } for pid=16956 comm="syz.7.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 186.283309][ T29] audit: type=1400 audit(186.236:8654): avc: denied { write } for pid=16956 comm="syz.7.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 186.305371][T16960] tipc: Enabling of bearer rejected, failed to enable media [ 186.392534][T16976] geneve0: entered allmulticast mode [ 186.403355][T16976] geneve0: entered promiscuous mode [ 186.507310][T16996] netlink: 'syz.6.5572': attribute type 13 has an invalid length. [ 186.546564][T16974] geneve0: left promiscuous mode [ 186.551705][T16974] geneve0: left allmulticast mode [ 186.668190][T17015] macvlan2: entered promiscuous mode [ 186.679267][T17015] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 186.698692][T17015] macvlan3: entered promiscuous mode [ 186.706180][T17015] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 187.339262][T17047] geneve0: entered allmulticast mode [ 187.355661][T17047] geneve0: entered promiscuous mode [ 187.455784][T17046] geneve0: left promiscuous mode [ 187.460969][T17046] geneve0: left allmulticast mode [ 187.620779][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5600'. [ 188.016246][T17114] -: renamed from syzkaller0 [ 188.310553][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5632'. [ 188.319894][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5632'. [ 188.416519][T17162] geneve0: entered allmulticast mode [ 188.422326][T17162] geneve0: entered promiscuous mode [ 188.493642][T17161] geneve0: left promiscuous mode [ 188.498746][T17161] geneve0: left allmulticast mode [ 188.850785][T17195] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 188.863560][T17194] IPVS: stopping master sync thread 17195 ... [ 188.905936][T17199] geneve0: entered allmulticast mode [ 188.911867][T17199] geneve0: entered promiscuous mode [ 188.998861][T17201] lo speed is unknown, defaulting to 1000 [ 189.015106][T17198] geneve0: left promiscuous mode [ 189.020304][T17198] geneve0: left allmulticast mode [ 189.055619][T17205] netlink: 'syz.7.5655': attribute type 27 has an invalid length. [ 189.086220][T17205] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.093646][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.128974][T17205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.139089][T17205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.169507][T17205] geneve2: left promiscuous mode [ 189.174639][T17205] geneve2: left allmulticast mode [ 189.188730][ T31] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.197820][ T31] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.209857][ T31] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.219182][ T31] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.228715][ T31] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.237752][ T31] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.248546][ T31] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.257705][ T31] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.344882][T17225] netlink: 664 bytes leftover after parsing attributes in process `syz.6.5665'. [ 189.584577][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5676'. [ 189.638809][T17255] netlink: 'syz.7.5678': attribute type 13 has an invalid length. [ 189.806366][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5681'. [ 189.974028][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 189.974040][ T29] audit: type=1400 audit(189.956:8751): avc: denied { bind } for pid=17273 comm="syz.4.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.002408][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5686'. [ 190.064569][ T29] audit: type=1400 audit(189.986:8752): avc: denied { setopt } for pid=17273 comm="syz.4.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.085029][ T29] audit: type=1400 audit(190.036:8753): avc: denied { watch watch_reads } for pid=17275 comm="syz.1.5687" path="/1040/file0" dev="tmpfs" ino=5372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.176821][ T29] audit: type=1326 audit(190.136:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f073eaa5ba7 code=0x7ffc0000 [ 190.199712][ T29] audit: type=1326 audit(190.136:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f073ea4add9 code=0x7ffc0000 [ 190.222824][ T29] audit: type=1326 audit(190.136:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f073eaa5ba7 code=0x7ffc0000 [ 190.245768][ T29] audit: type=1326 audit(190.136:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f073ea4add9 code=0x7ffc0000 [ 190.269130][ T29] audit: type=1326 audit(190.136:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073eaaebe9 code=0x7ffc0000 [ 190.292302][ T29] audit: type=1326 audit(190.136:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073eaaebe9 code=0x7ffc0000 [ 190.315280][ T29] audit: type=1326 audit(190.136:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f073eaa5ba7 code=0x7ffc0000 [ 190.400695][T17293] netlink: 'syz.1.5694': attribute type 13 has an invalid length. [ 190.453376][T17303] netlink: 'syz.2.5699': attribute type 7 has an invalid length. [ 190.461238][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 190.481200][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5700'. [ 190.494124][T17305] hsr_slave_0 (unregistering): left promiscuous mode [ 190.598915][T17312] lo speed is unknown, defaulting to 1000 [ 190.786678][T17335] bond3: entered promiscuous mode [ 190.791996][T17335] bond3: entered allmulticast mode [ 190.799486][T17335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.814228][T17335] bond3 (unregistering): Released all slaves [ 191.125530][T17375] ref_ctr increment failed for inode: 0x1511 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005f300 [ 191.173152][T17374] uprobe: syz.1.5721:17374 failed to unregister, leaking uprobe [ 191.250505][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5724'. [ 191.333125][T17390] netlink: 'syz.4.5728': attribute type 1 has an invalid length. [ 191.350935][T17390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.361153][T17393] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 191.385285][T17390] bond4: (slave veth7): Enslaving as an active interface with a down link [ 191.425508][T17397] serio: Serial port ptm0 [ 191.432032][T17390] bond4: (slave dummy0): making interface the new active one [ 191.440493][T17390] dummy0: entered promiscuous mode [ 191.474133][T17390] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 191.588401][T17416] openvswitch: netlink: Message has 6 unknown bytes. [ 191.700908][T17435] bridge0: port 3(macvtap1) entered blocking state [ 191.707907][T17435] bridge0: port 3(macvtap1) entered disabled state [ 191.727150][T17435] macvtap1: entered allmulticast mode [ 191.732630][T17435] bridge0: entered allmulticast mode [ 191.741824][T17435] macvtap1: left allmulticast mode [ 191.746986][T17435] bridge0: left allmulticast mode [ 191.776221][T17444] lo speed is unknown, defaulting to 1000 [ 192.090988][T17475] netlink: 'syz.1.5764': attribute type 1 has an invalid length. [ 192.330224][T17506] lo speed is unknown, defaulting to 1000 [ 192.416072][T17514] lo speed is unknown, defaulting to 1000 [ 192.662645][T17551] lo speed is unknown, defaulting to 1000 [ 192.951784][T17580] __nla_validate_parse: 4 callbacks suppressed [ 192.951799][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5804'. [ 192.967465][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5804'. [ 193.012796][T17580] bridge0: port 3(vlan2) entered blocking state [ 193.019385][T17580] bridge0: port 3(vlan2) entered disabled state [ 193.032721][T17580] vlan2: entered allmulticast mode [ 193.038160][T17580] bridge0: entered allmulticast mode [ 193.044196][T17580] vlan2: left allmulticast mode [ 193.049128][T17580] bridge0: left allmulticast mode [ 193.070360][T17584] IPVS: Error connecting to the multicast addr [ 193.084933][T17585] lo speed is unknown, defaulting to 1000 [ 193.120126][T17590] sctp: [Deprecated]: syz.1.5808 (pid 17590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.120126][T17590] Use struct sctp_sack_info instead [ 193.260026][T17607] bridge0: port 1(macvtap2) entered blocking state [ 193.266930][T17607] bridge0: port 1(macvtap2) entered disabled state [ 193.275818][T17607] macvtap2: entered allmulticast mode [ 193.281224][T17607] bridge0: entered allmulticast mode [ 193.287466][T17611] sd 0:0:1:0: device reset [ 193.291760][T17607] macvtap2: left allmulticast mode [ 193.297028][T17607] bridge0: left allmulticast mode [ 193.329000][T17617] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -2561, delta: 1 [ 193.337694][T17617] ref_ctr increment failed for inode: 0x18e offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810005b3c0 [ 193.524108][T17640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5832'. [ 193.558029][T17647] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5835'. [ 193.703401][T17661] lo speed is unknown, defaulting to 1000 [ 193.969664][T17693] tipc: Started in network mode [ 193.974710][T17693] tipc: Node identity ac14140f, cluster identity 4711 [ 193.983603][T17693] tipc: New replicast peer: 255.255.255.255 [ 193.990123][T17693] tipc: Enabled bearer , priority 10 [ 193.997259][T17693] netlink: 340 bytes leftover after parsing attributes in process `syz.4.5854'. [ 194.010031][T17691] lo speed is unknown, defaulting to 1000 [ 194.081172][T17699] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 194.111865][T17699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.170590][T17699] bond1: (slave veth7): Enslaving as an active interface with a down link [ 194.215961][T17712] bond1: (slave dummy0): making interface the new active one [ 194.238098][T17712] dummy0: entered promiscuous mode [ 194.245821][T17712] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 194.320224][T17728] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 194.557638][T17743] IPVS: Error connecting to the multicast addr [ 194.733130][T17758] netlink: zone id is out of range [ 194.985261][T17779] sctp: [Deprecated]: syz.7.5889 (pid 17779) Use of int in max_burst socket option deprecated. [ 194.985261][T17779] Use struct sctp_assoc_value instead [ 195.101455][ T3397] tipc: Node number set to 2886997007 [ 195.775094][T17806] block device autoloading is deprecated and will be removed. [ 195.833415][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 195.833429][ T29] audit: type=1326 audit(195.816:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 195.862868][ T29] audit: type=1326 audit(195.816:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 195.885941][ T29] audit: type=1326 audit(195.816:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 195.909001][ T29] audit: type=1326 audit(195.816:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 195.932032][ T29] audit: type=1326 audit(195.816:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 195.955193][ T29] audit: type=1326 audit(195.816:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 195.978247][ T29] audit: type=1326 audit(195.816:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 196.001562][ T29] audit: type=1326 audit(195.816:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 196.024625][ T29] audit: type=1326 audit(195.816:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 196.047673][ T29] audit: type=1326 audit(195.816:9025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 196.551741][T17876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17876 comm=syz.4.5930 [ 196.613089][T17884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.621649][T17884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.788264][T17890] lo speed is unknown, defaulting to 1000 [ 196.867093][T17890] chnl_net:caif_netlink_parms(): no params data found [ 196.887211][T17906] lo speed is unknown, defaulting to 1000 [ 196.930928][T17890] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.938202][T17890] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.945907][T17890] bridge_slave_0: entered allmulticast mode [ 196.953926][T17890] bridge_slave_0: entered promiscuous mode [ 196.987992][T17890] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.995216][T17890] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.002445][T17890] bridge_slave_1: entered allmulticast mode [ 197.009029][T17890] bridge_slave_1: entered promiscuous mode [ 197.027557][T17890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.040338][T17890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.121944][T17890] team0: Port device team_slave_0 added [ 197.138853][T17890] team0: Port device team_slave_1 added [ 197.198595][T17890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.205712][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.231992][T17890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.266354][T17929] lo speed is unknown, defaulting to 1000 [ 197.269835][T17890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.279367][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.305458][T17890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.402025][T17890] hsr_slave_0: entered promiscuous mode [ 197.408467][T17890] hsr_slave_1: entered promiscuous mode [ 197.432851][T17890] debugfs: 'hsr0' already exists in 'hsr' [ 197.438627][T17890] Cannot create hsr debugfs directory [ 197.549655][T17951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17951 comm=syz.4.5960 [ 197.573854][T17890] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 197.583691][T17890] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 197.593666][T17890] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 197.605565][T17890] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 197.616091][T17955] bridge: RTM_NEWNEIGH with invalid ether address [ 197.687486][T17890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.695774][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5967'. [ 197.715011][T17890] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.734061][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.741139][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.781527][ T4055] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.788711][ T4055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.889051][T17890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.006562][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5978'. [ 198.023148][T18018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.039112][T18018] vlan2: entered allmulticast mode [ 198.044322][T18018] bond2: entered allmulticast mode [ 198.068515][T17890] veth0_vlan: entered promiscuous mode [ 198.079204][T17890] veth1_vlan: entered promiscuous mode [ 198.096343][T17890] veth0_macvtap: entered promiscuous mode [ 198.104476][T17890] veth1_macvtap: entered promiscuous mode [ 198.117107][T17890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.130257][T17890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.142425][ T4013] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.165310][ T4013] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.180575][ T4013] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.189684][ T4013] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.202144][T18032] lo speed is unknown, defaulting to 1000 [ 198.237055][T18037] lo speed is unknown, defaulting to 1000 [ 199.270704][T18071] loop8: detected capacity change from 0 to 1024 [ 199.300467][T18071] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.449595][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.822201][ T3707] hid_parser_main: 29 callbacks suppressed [ 199.822219][ T3707] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 199.836427][ T3707] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.889454][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 199.900217][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 200.641165][T18213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6060'. [ 200.912551][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6070'. [ 200.932614][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 200.932628][ T29] audit: type=1326 audit(200.916:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz.8.6072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36e750ebe9 code=0x0 [ 200.978935][ T29] audit: type=1326 audit(200.956:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.001983][ T29] audit: type=1326 audit(200.956:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.032787][ T29] audit: type=1326 audit(200.986:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.055679][ T29] audit: type=1326 audit(200.986:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.078578][ T29] audit: type=1326 audit(200.986:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.101468][ T29] audit: type=1326 audit(200.986:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.124658][ T29] audit: type=1326 audit(200.986:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.147707][ T29] audit: type=1326 audit(200.986:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.170681][ T29] audit: type=1326 audit(200.986:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18222 comm="syz.7.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3e7c7aebe9 code=0x7ffc0000 [ 201.194011][T18249] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6074'. [ 201.203204][T18249] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6074'. [ 201.669143][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6092'. [ 201.679020][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6092'. [ 201.694244][T18291] futex_wake_op: syz.6.6093 tries to shift op by -1; fix this program [ 201.772948][T18305] SELinux: failed to load policy [ 201.808155][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6101'. [ 202.112792][T18363] veth1_to_bond: entered allmulticast mode [ 202.119980][T18363] bond0: (slave bond_slave_1): Releasing backup interface [ 202.128959][T18363] veth1_to_bond (unregistering): left allmulticast mode [ 202.356813][ T3692] kernel write not supported for file [eventfd] (pid: 3692 comm: kworker/0:7) [ 202.528905][T18410] netlink: 'syz.1.6146': attribute type 6 has an invalid length. [ 202.541399][ T4013] dummy0: left promiscuous mode [ 202.717125][T18441] wg2: entered promiscuous mode [ 202.722418][T18441] wg2: entered allmulticast mode [ 202.827459][T18456] vlan2: entered allmulticast mode [ 202.832655][T18456] macvtap0: entered allmulticast mode [ 203.451329][ T155] bond2 (unregistering): (slave gretap1): Releasing active interface [ 203.612513][ T155] bond0 (unregistering): Released all slaves [ 203.623877][ T155] bond1 (unregistering): Released all slaves [ 203.632174][ T155] bond2 (unregistering): Released all slaves [ 203.640256][T18504] bond0: entered promiscuous mode [ 203.645439][T18504] bond_slave_0: entered promiscuous mode [ 203.651495][T18504] bond_slave_1: entered promiscuous mode [ 203.657222][T18504] bond0: entered allmulticast mode [ 203.662393][T18504] bond_slave_0: entered allmulticast mode [ 203.668130][T18504] bond_slave_1: entered allmulticast mode [ 203.706299][ T155] tipc: Left network mode [ 203.716871][ T155] hsr_slave_0: left promiscuous mode [ 204.333099][T18597] __nla_validate_parse: 10 callbacks suppressed [ 204.333117][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6210'. [ 204.424247][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6214'. [ 204.563405][T18643] netlink: 'syz.4.6221': attribute type 3 has an invalid length. [ 204.704016][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6228'. [ 204.824520][T18683] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6233'. [ 204.835608][T18678] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6233'. [ 205.226772][T18708] syz.6.6243: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 205.241511][T18708] CPU: 0 UID: 0 PID: 18708 Comm: syz.6.6243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.241618][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.241632][T18708] Call Trace: [ 205.241639][T18708] [ 205.241646][T18708] __dump_stack+0x1d/0x30 [ 205.241667][T18708] dump_stack_lvl+0xe8/0x140 [ 205.241686][T18708] dump_stack+0x15/0x1b [ 205.241703][T18708] warn_alloc+0x12b/0x1a0 [ 205.241811][T18708] __vmalloc_node_range_noprof+0x9c/0xe00 [ 205.241840][T18708] ? __futex_wait+0x1ff/0x260 [ 205.241871][T18708] ? __pfx_futex_wake_mark+0x10/0x10 [ 205.241918][T18708] ? __rcu_read_unlock+0x4f/0x70 [ 205.241935][T18708] ? avc_has_perm_noaudit+0x1b1/0x200 [ 205.241959][T18708] vmalloc_user_noprof+0x7d/0xb0 [ 205.241986][T18708] ? xskq_create+0x80/0xe0 [ 205.242065][T18708] xskq_create+0x80/0xe0 [ 205.242200][T18708] xsk_init_queue+0x95/0xf0 [ 205.242228][T18708] xsk_setsockopt+0x477/0x640 [ 205.242255][T18708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.242362][T18708] __sys_setsockopt+0x181/0x200 [ 205.242415][T18708] __x64_sys_setsockopt+0x64/0x80 [ 205.242432][T18708] x64_sys_call+0x20ec/0x2ff0 [ 205.242450][T18708] do_syscall_64+0xd2/0x200 [ 205.242473][T18708] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.242507][T18708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.242528][T18708] RIP: 0033:0x7f53b8faebe9 [ 205.242550][T18708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.242568][T18708] RSP: 002b:00007f53b7a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.242587][T18708] RAX: ffffffffffffffda RBX: 00007f53b91d5fa0 RCX: 00007f53b8faebe9 [ 205.242614][T18708] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 205.242696][T18708] RBP: 00007f53b9031e19 R08: 0000000000000004 R09: 0000000000000000 [ 205.242706][T18708] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 205.242719][T18708] R13: 00007f53b91d6038 R14: 00007f53b91d5fa0 R15: 00007ffc57807218 [ 205.242735][T18708] [ 205.242741][T18708] Mem-Info: [ 205.250626][T18674] Set syz1 is full, maxelem 65536 reached [ 205.252684][T18708] active_anon:48663 inactive_anon:19 isolated_anon:0 [ 205.252684][T18708] active_file:14844 inactive_file:10742 isolated_file:0 [ 205.252684][T18708] unevictable:0 dirty:257 writeback:0 [ 205.252684][T18708] slab_reclaimable:3699 slab_unreclaimable:214925 [ 205.252684][T18708] mapped:29269 shmem:34139 pagetables:1383 [ 205.252684][T18708] sec_pagetables:0 bounce:0 [ 205.252684][T18708] kernel_misc_reclaimable:0 [ 205.252684][T18708] free:1600612 free_pcp:35211 free_cma:0 [ 205.504664][T18708] Node 0 active_anon:196740kB inactive_anon:76kB active_file:59376kB inactive_file:42968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115376kB dirty:1028kB writeback:0kB shmem:136440kB kernel_stack:4992kB pagetables:5764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.511784][ T4055] dummy0: left promiscuous mode [ 205.532656][T18708] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.566600][T18708] lowmem_reserve[]: 0 2883 7862 7862 [ 205.572290][T18708] Node 0 DMA32 free:2949208kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 205.603068][T18708] lowmem_reserve[]: 0 0 4978 4978 [ 205.608113][T18708] Node 0 Normal free:3458720kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180356kB inactive_anon:76kB active_file:59376kB inactive_file:42968kB unevictable:0kB writepending:1032kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:132456kB local_pcp:96944kB free_cma:0kB [ 205.640618][T18708] lowmem_reserve[]: 0 0 0 0 [ 205.645176][T18708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.657956][T18708] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949208kB [ 205.674136][T18708] Node 0 Normal: 1692*4kB (UME) 293*8kB (UME) 150*16kB (UME) 457*32kB (UM) 560*64kB (UME) 229*128kB (UME) 176*256kB (UM) 113*512kB (UME) 60*1024kB (UM) 48*2048kB (UM) 758*4096kB (UM) = 3458712kB [ 205.693819][T18708] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 205.703189][T18708] 59678 total pagecache pages [ 205.707959][T18708] 20 pages in swap cache [ 205.712293][T18708] Free swap = 124916kB [ 205.716427][T18708] Total swap = 124996kB [ 205.720584][T18708] 2097051 pages RAM [ 205.724575][T18708] 0 pages HighMem/MovableOnly [ 205.729337][T18708] 80441 pages reserved [ 205.789606][T18720] loop8: detected capacity change from 0 to 1024 [ 205.906988][T18740] vhci_hcd: invalid port number 96 [ 205.912938][T18740] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 205.943325][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 205.943380][ T29] audit: type=1400 audit(205.926:9301): avc: denied { create } for pid=18747 comm="syz.6.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 205.975618][ T29] audit: type=1400 audit(205.956:9302): avc: denied { bind } for pid=18747 comm="syz.6.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 206.183919][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6266'. [ 206.193098][T18757] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6266'. [ 206.202086][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6266'. [ 206.222840][T18757] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6266'. [ 206.231835][T18757] netlink: 'syz.8.6266': attribute type 6 has an invalid length. [ 206.287009][T18763] sd 0:0:1:0: device reset [ 206.354437][T18770] IPv6: sit1: Disabled Multicast RS [ 206.369346][T18770] sit1: entered allmulticast mode [ 206.578961][ T29] audit: type=1326 audit(206.556:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.601953][ T29] audit: type=1326 audit(206.556:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.640083][ T29] audit: type=1326 audit(206.606:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.663137][ T29] audit: type=1326 audit(206.606:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.686391][ T29] audit: type=1326 audit(206.606:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.709267][ T29] audit: type=1326 audit(206.606:9308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.732412][ T29] audit: type=1326 audit(206.606:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 206.755270][ T29] audit: type=1326 audit(206.606:9310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.6.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 207.293804][T18826] tipc: Started in network mode [ 207.298768][T18826] tipc: Node identity 2ab8b4118866, cluster identity 4711 [ 207.306038][T18826] tipc: Enabled bearer , priority 0 [ 207.316070][T18826] tipc: Disabling bearer [ 207.537890][T18853] program syz.6.6307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.547778][T18853] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 207.847028][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6323'. [ 207.873921][T18891] bridge_slave_1: left allmulticast mode [ 207.879638][T18891] bridge_slave_1: left promiscuous mode [ 207.885374][T18891] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.925396][T18891] bridge_slave_0: left allmulticast mode [ 207.931501][T18891] bridge_slave_0: left promiscuous mode [ 207.937318][T18891] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.382940][ T3369] kernel write not supported for file [eventfd] (pid: 3369 comm: kworker/0:2) [ 208.678981][T18942] lo speed is unknown, defaulting to 1000 [ 208.731928][T18942] chnl_net:caif_netlink_parms(): no params data found [ 208.769453][ T4013] bridge_slave_1: left allmulticast mode [ 208.775292][ T4013] bridge_slave_1: left promiscuous mode [ 208.781202][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.791589][ T4013] bridge_slave_0: left allmulticast mode [ 208.797351][ T4013] bridge_slave_0: left promiscuous mode [ 208.803142][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.882338][ T4013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.893606][ T4013] bond0 (unregistering): Released all slaves [ 208.919680][T18969] loop8: detected capacity change from 0 to 128 [ 208.934924][T18942] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.942365][T18942] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.962818][T18942] bridge_slave_0: entered allmulticast mode [ 208.971204][T18942] bridge_slave_0: entered promiscuous mode [ 208.979171][T18942] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.986645][T18942] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.994719][T18942] bridge_slave_1: entered allmulticast mode [ 209.001823][T18942] bridge_slave_1: entered promiscuous mode [ 209.064625][ T4013] hsr_slave_0: left promiscuous mode [ 209.077623][ T4013] hsr_slave_1: left promiscuous mode [ 209.095326][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.112192][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.194837][ T4013] team0 (unregistering): Port device team_slave_1 removed [ 209.213354][ T4013] team0 (unregistering): Port device team_slave_0 removed [ 209.248407][T18942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.261977][T18942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.331368][T18987] bridge_slave_1: left allmulticast mode [ 209.337553][T18987] bridge_slave_1: left promiscuous mode [ 209.343395][T18987] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.356359][T18987] bridge_slave_0: left allmulticast mode [ 209.362075][T18987] bridge_slave_0: left promiscuous mode [ 209.367777][T18987] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.465340][T18942] team0: Port device team_slave_0 added [ 209.477365][T18942] team0: Port device team_slave_1 added [ 209.515440][T18942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.522508][T18942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.548668][T18942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.564156][T18942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.571288][T18942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.597997][T18942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.637031][T18942] hsr_slave_0: entered promiscuous mode [ 209.648184][T18942] hsr_slave_1: entered promiscuous mode [ 209.658765][T18942] debugfs: 'hsr0' already exists in 'hsr' [ 209.664700][T18942] Cannot create hsr debugfs directory [ 209.690672][ T3397] kernel write not supported for file [eventfd] (pid: 3397 comm: kworker/1:3) [ 209.738288][T19008] loop8: detected capacity change from 0 to 8192 [ 209.835252][T18942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 209.848004][T18942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 209.867069][T18942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 209.871581][T19017] infiniband syz!: set down [ 209.878743][T19017] infiniband syz!: added team_slave_0 [ 209.886456][T18942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 209.889113][T19017] RDS/IB: syz!: added [ 209.897497][T19017] smc: adding ib device syz! with port count 1 [ 209.903882][T19017] smc: ib device syz! port 1 has pnetid [ 209.934492][T18942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.947850][T18942] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.963056][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.970745][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.983718][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.990843][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.008109][T18942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.018636][T18942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.089221][T18942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.202768][T18942] veth0_vlan: entered promiscuous mode [ 210.210804][T18942] veth1_vlan: entered promiscuous mode [ 210.224915][T18942] veth0_macvtap: entered promiscuous mode [ 210.232984][T18942] veth1_macvtap: entered promiscuous mode [ 210.244360][T18942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.258066][T18942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.270663][ T4065] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.279747][T19051] tipc: Enabling of bearer rejected, failed to enable media [ 210.298771][ T4065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.312842][ T4065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.330516][ T4065] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.689799][T19091] __nla_validate_parse: 1 callbacks suppressed [ 210.689815][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6397'. [ 210.793921][T19104] serio: Serial port ptm0 [ 211.327862][T19129] netlink: 'syz.6.6415': attribute type 3 has an invalid length. [ 211.381079][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 211.381092][ T29] audit: type=1400 audit(211.366:9496): avc: denied { lock } for pid=19138 comm="syz.9.6420" path="socket:[59455]" dev="sockfs" ino=59455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 211.434982][T19142] serio: Serial port ptm0 [ 212.240157][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6428'. [ 212.249669][T19157] bridge_slave_1: left allmulticast mode [ 212.255417][T19157] bridge_slave_1: left promiscuous mode [ 212.261338][T19157] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.271329][T19157] bridge_slave_0: left allmulticast mode [ 212.277036][T19157] bridge_slave_0: left promiscuous mode [ 212.282806][T19157] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.464056][T19180] netlink: 'syz.6.6437': attribute type 10 has an invalid length. [ 212.473859][T19180] team0: Port device dummy0 added [ 212.479666][T19180] netlink: 'syz.6.6437': attribute type 10 has an invalid length. [ 212.493580][T19180] team0: Port device dummy0 removed [ 212.500763][T19180] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.558403][ T29] audit: type=1326 audit(212.536:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.581582][ T29] audit: type=1326 audit(212.536:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.651958][T19194] IPv4: Oversized IP packet from 127.202.26.0 [ 212.679612][ T29] audit: type=1326 audit(212.596:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.703009][ T29] audit: type=1326 audit(212.596:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.726175][ T29] audit: type=1326 audit(212.596:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.749255][ T29] audit: type=1326 audit(212.596:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.772250][ T29] audit: type=1326 audit(212.596:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.795266][ T29] audit: type=1326 audit(212.596:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.819174][ T29] audit: type=1326 audit(212.596:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19188 comm="syz.8.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 212.948495][T19212] lo speed is unknown, defaulting to 1000 [ 213.002711][T19223] lo speed is unknown, defaulting to 1000 [ 213.365021][T19263] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.387964][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6475'. [ 213.444772][T19263] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.529986][T19263] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.563822][T19276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6480'. [ 213.594407][T19263] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.680612][ T4013] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.705991][ T4013] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.716077][ T4013] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.735213][ T4013] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.849733][T19307] loop8: detected capacity change from 0 to 1024 [ 213.859664][T19307] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.873351][T19307] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 213.884909][T19307] EXT4-fs (loop8): orphan cleanup on readonly fs [ 213.896775][T19307] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.6490: Failed to acquire dquot type 0 [ 213.920037][T19307] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.6490: Failed to acquire dquot type 0 [ 213.967394][T19318] loop9: detected capacity change from 0 to 164 [ 213.978505][T19307] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.6490: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.010737][T19307] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.6490: Failed to acquire dquot type 0 [ 214.033886][T19318] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 214.040752][T19307] EXT4-fs (loop8): 1 orphan inode deleted [ 214.048678][T19307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.091262][T19307] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 16: comm syz.8.6490: path /96/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 214.103648][T19318] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 214.143172][T19318] Symlink component flag not implemented [ 214.148845][T19318] Symlink component flag not implemented [ 214.163620][T19318] Symlink component flag not implemented (7) [ 214.169687][T19318] Symlink component flag not implemented (116) [ 214.186969][T19333] bond1: entered promiscuous mode [ 214.192138][T19333] bond1: entered allmulticast mode [ 214.207010][T19333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.225445][T19333] bond1 (unregistering): Released all slaves [ 214.411731][T19342] macvlan2: left promiscuous mode [ 214.444632][T19346] netlink: 'syz.6.6511': attribute type 3 has an invalid length. [ 214.492704][T19348] vhci_hcd: invalid port number 96 [ 214.497944][T19348] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 214.709441][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.784526][T19376] netlink: 536 bytes leftover after parsing attributes in process `syz.6.6526'. [ 214.803890][T19376] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6526'. [ 214.842543][T19381] netlink: 'syz.8.6529': attribute type 10 has an invalid length. [ 214.860598][T19381] ipvlan0: entered allmulticast mode [ 214.866039][T19381] veth0_vlan: entered allmulticast mode [ 214.881258][T19381] team0: Device ipvlan0 failed to register rx_handler [ 215.244644][T19412] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5130 sclass=netlink_audit_socket pid=19412 comm=syz.6.6542 [ 215.602835][T19434] bond4: entered allmulticast mode [ 215.608455][T19434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.616052][T19434] bridge0: port 1(bond4) entered blocking state [ 215.622499][T19434] bridge0: port 1(bond4) entered disabled state [ 215.629808][T19434] bond4: entered promiscuous mode [ 215.635480][T19434] bridge0: port 1(bond4) entered blocking state [ 215.642052][T19434] bridge0: port 1(bond4) entered forwarding state [ 215.650949][ T155] bridge0: port 1(bond4) entered disabled state [ 215.674953][T19440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6555'. [ 215.707938][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6557'. [ 215.832082][T19463] loop8: detected capacity change from 0 to 128 [ 215.843036][T19463] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.882491][T17890] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.942641][T19477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6572'. [ 216.038322][T19493] pimreg: entered allmulticast mode [ 216.053276][T19493] pimreg: left allmulticast mode [ 216.102234][T19507] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6586'. [ 216.174741][T19520] netlink: 'syz.9.6598': attribute type 10 has an invalid length. [ 216.182693][T19520] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6598'. [ 216.210411][T19520] dummy0: entered promiscuous mode [ 216.386460][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6592'. [ 216.397552][T19524] batadv0: left allmulticast mode [ 216.402708][T19524] batadv0: left promiscuous mode [ 216.407781][T19524] bridge0: port 1(batadv0) entered disabled state [ 216.464759][T19534] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.6595'. [ 216.473946][T19534] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6595'. [ 216.475928][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6594'. [ 216.496303][T19535] vxlan0: entered promiscuous mode [ 216.502959][ T4013] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.513576][ T4013] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.522837][ T4013] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.532040][ T4013] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.129510][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 217.129524][ T29] audit: type=1326 audit(217.107:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.158775][ T29] audit: type=1326 audit(217.107:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.181895][ T29] audit: type=1326 audit(217.107:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.204955][ T29] audit: type=1326 audit(217.107:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.228682][ T29] audit: type=1326 audit(217.107:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.251923][ T29] audit: type=1326 audit(217.107:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.274975][ T29] audit: type=1326 audit(217.107:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.298129][ T29] audit: type=1326 audit(217.107:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.321276][ T29] audit: type=1326 audit(217.107:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19590 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.346614][ T29] audit: type=1326 audit(217.167:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19593 comm="syz.1.6623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 217.411309][T19598] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.423047][T19598] vhci_hcd: invalid port number 129 [ 217.428381][T19598] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 217.456677][T19609] netlink: 'syz.8.6628': attribute type 10 has an invalid length. [ 217.460899][T19611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.464653][T19609] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6628'. [ 217.475572][T19611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.482953][T19609] dummy0: entered promiscuous mode [ 217.569512][T19623] @: renamed from vlan0 [ 217.881297][T19661] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6648'. [ 218.425492][T19718] loop9: detected capacity change from 0 to 512 [ 218.456691][T19719] lo speed is unknown, defaulting to 1000 [ 218.473437][T19718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.525990][T18942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.773563][ T324] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 219.421892][T19832] lo speed is unknown, defaulting to 1000 [ 219.553908][ T4035] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.564385][ T4035] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.659750][T19884] netlink: 'syz.8.6720': attribute type 3 has an invalid length. [ 219.682670][ T4035] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.693238][ T4035] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.810874][ T4035] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.821274][ T4035] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.982586][T19832] chnl_net:caif_netlink_parms(): no params data found [ 220.022946][ T4035] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.034045][ T4035] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.101595][T19832] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.108691][T19832] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.143908][T19832] bridge_slave_0: entered allmulticast mode [ 220.164025][T19832] bridge_slave_0: entered promiscuous mode [ 220.185071][T20038] IPVS: Error joining to the multicast group [ 220.219631][T19832] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.226906][T19832] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.260292][T19832] bridge_slave_1: entered allmulticast mode [ 220.267984][T19832] bridge_slave_1: entered promiscuous mode [ 220.427550][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.445448][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.458040][ T4035] bond0 (unregistering): Released all slaves [ 220.501362][T19832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.519207][T19832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.567489][T19832] team0: Port device team_slave_0 added [ 220.585487][T19832] team0: Port device team_slave_1 added [ 220.594014][ T4035] hsr_slave_0: left promiscuous mode [ 220.610196][ T4035] hsr_slave_1: left promiscuous mode [ 220.617863][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.625329][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.647376][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.654910][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.665641][ T4035] veth1_macvtap: left promiscuous mode [ 220.671209][ T4035] veth0_macvtap: left promiscuous mode [ 220.676910][ T4035] veth1_vlan: left promiscuous mode [ 220.682251][ T4035] veth0_vlan: left promiscuous mode [ 220.768625][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 220.780062][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 220.836970][T19832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.844051][T19832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.870304][T19832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.881709][T19832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.888687][T19832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.914749][T19832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.948202][T19832] hsr_slave_0: entered promiscuous mode [ 220.959976][T19832] hsr_slave_1: entered promiscuous mode [ 220.974044][T19832] debugfs: 'hsr0' already exists in 'hsr' [ 220.979906][T19832] Cannot create hsr debugfs directory [ 221.009774][T20198] __nla_validate_parse: 7 callbacks suppressed [ 221.009791][T20198] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6748'. [ 221.071332][T20240] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6752'. [ 221.091967][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6753'. [ 221.111241][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6753'. [ 221.121381][T20248] siw: device registration error -23 [ 221.122350][T20240] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6752'. [ 221.139387][T20244] lo speed is unknown, defaulting to 1000 [ 221.170471][T20261] vlan2: entered allmulticast mode [ 221.175783][T20261] dummy0: entered allmulticast mode [ 221.229854][T20289] netlink: 272 bytes leftover after parsing attributes in process `syz.6.6758'. [ 221.316417][T20322] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 221.394576][T20341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20341 comm=syz.1.6767 [ 221.427547][T20345] netlink: 'syz.6.6770': attribute type 27 has an invalid length. [ 221.472075][T20345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.484569][T20345] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.493590][T20345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.540969][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6777'. [ 221.574489][T19832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.592600][T19832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.621530][T19832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.648956][T19832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.711385][T19832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.735469][T19832] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.760901][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.767988][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.790969][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.798239][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.955949][T19832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.064247][T19832] veth0_vlan: entered promiscuous mode [ 222.075140][T19832] veth1_vlan: entered promiscuous mode [ 222.095318][T19832] veth0_macvtap: entered promiscuous mode [ 222.103208][T19832] veth1_macvtap: entered promiscuous mode [ 222.114714][T19832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.127856][T19832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.139253][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.149834][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.168256][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.193715][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.228409][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 222.228424][ T29] audit: type=1326 audit(222.207:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.258105][ T29] audit: type=1326 audit(222.207:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.298136][T20441] loop3: detected capacity change from 0 to 128 [ 222.332201][ T29] audit: type=1326 audit(222.277:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.355421][ T29] audit: type=1326 audit(222.277:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.378791][ T29] audit: type=1326 audit(222.277:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.401722][ T29] audit: type=1326 audit(222.277:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.424917][ T29] audit: type=1326 audit(222.277:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.447904][ T29] audit: type=1326 audit(222.277:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.471742][ T29] audit: type=1326 audit(222.277:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.494771][ T29] audit: type=1326 audit(222.277:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2cfbebe9 code=0x7ffc0000 [ 222.594416][T20450] loop3: detected capacity change from 0 to 128 [ 222.691125][T20458] vlan2: entered allmulticast mode [ 222.696291][T20458] dummy0: entered allmulticast mode [ 222.817157][T20468] netlink: 'syz.8.6803': attribute type 10 has an invalid length. [ 222.817199][T20470] netlink: 'syz.4.6806': attribute type 27 has an invalid length. [ 222.837011][T20468] dummy0: left promiscuous mode [ 222.861891][T20468] team0: Port device dummy0 added [ 222.868563][T20473] netlink: 'syz.8.6803': attribute type 10 has an invalid length. [ 222.898479][T20473] team0: Port device dummy0 removed [ 222.906835][T20473] dummy0: entered promiscuous mode [ 222.914776][T20473] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 222.941081][T20470] veth0_to_team: left promiscuous mode [ 222.946618][T20470] veth0_to_team: left allmulticast mode [ 223.054924][T20470] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.094014][T20470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.134841][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6812'. [ 223.164594][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6812'. [ 223.182097][T20485] siw: device registration error -23 [ 223.447149][T20507] loop3: detected capacity change from 0 to 512 [ 223.493059][T20507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.583678][T19832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.630286][T20524] netlink: 'syz.3.6824': attribute type 27 has an invalid length. [ 223.681965][T20524] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.689302][T20524] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.727547][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.744640][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.786532][T20527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.795708][T20527] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.806245][T20527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.828435][T20529] bond1: entered promiscuous mode [ 223.833645][T20529] bond1: entered allmulticast mode [ 223.839210][T20529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.848760][T20529] bond1 (unregistering): Released all slaves [ 223.863414][ T4035] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.889743][T20601] lo speed is unknown, defaulting to 1000 [ 223.907320][ T4035] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.931383][ T4035] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.961488][ T4035] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.196791][ T3397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3397 comm=kworker/1:3 [ 224.220565][T20648] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 224.225717][T20645] lo speed is unknown, defaulting to 1000 [ 224.285951][T20653] atomic_op ffff88811cf76928 conn xmit_atomic 0000000000000000 [ 224.367539][T20671] netlink: 'syz.1.6845': attribute type 27 has an invalid length. [ 224.391234][T20671] wg2: left promiscuous mode [ 224.396047][T20671] wg2: left allmulticast mode [ 224.426932][T20683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6848'. [ 224.487323][T20684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.508813][ T3707] lo speed is unknown, defaulting to 1000 [ 224.514818][ T3707] syz0: Port: 1 Link ACTIVE [ 224.804459][T20713] lo speed is unknown, defaulting to 1000 [ 224.897845][T20719] lo speed is unknown, defaulting to 1000 [ 225.802493][T20791] netlink: 'syz.8.6864': attribute type 27 has an invalid length. [ 225.816753][T20794] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.853644][T20791] bond0: left promiscuous mode [ 225.858578][T20791] bond_slave_0: left promiscuous mode [ 225.864185][T20791] bond_slave_1: left promiscuous mode [ 225.871157][T20791] dummy0: left promiscuous mode [ 225.876217][T20791] bond0: left allmulticast mode [ 225.881298][T20791] bond_slave_0: left allmulticast mode [ 225.886935][T20791] bond_slave_1: left allmulticast mode [ 225.923213][T20791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.936751][T20791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.962933][T20791] ipvlan0: left allmulticast mode [ 225.968125][T20791] veth0_vlan: left allmulticast mode [ 225.982855][T20794] vlan0: entered allmulticast mode [ 225.988290][T20794] bond5: entered allmulticast mode [ 226.037154][T20831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.045500][T20831] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.075170][T20831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.096051][ T4065] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.106849][ T4065] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.138446][ T4065] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.157593][ T4065] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.213068][T20851] lo speed is unknown, defaulting to 1000 [ 226.299627][T20857] __nla_validate_parse: 2 callbacks suppressed [ 226.299642][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6876'. [ 226.604969][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6881'. [ 226.614266][T20888] netlink: 'syz.8.6881': attribute type 30 has an invalid length. [ 226.704614][ T4035] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.714908][ T4035] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.743797][ T4035] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.752405][T20896] netlink: 'syz.1.6884': attribute type 13 has an invalid length. [ 226.753910][ T4035] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.760416][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 226.780161][T20896] netlink: 'syz.1.6884': attribute type 13 has an invalid length. [ 226.788073][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 227.362264][T20976] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.6909'. [ 227.371950][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6909'. [ 228.032667][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 228.032681][ T29] audit: type=1326 audit(228.017:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.072700][ T29] audit: type=1326 audit(228.047:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.096161][ T29] audit: type=1326 audit(228.047:9896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.119197][ T29] audit: type=1326 audit(228.047:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.142149][ T29] audit: type=1326 audit(228.057:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.165180][ T29] audit: type=1326 audit(228.057:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.188151][ T29] audit: type=1326 audit(228.057:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.211675][ T29] audit: type=1326 audit(228.057:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.235005][ T29] audit: type=1326 audit(228.057:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.257887][ T29] audit: type=1326 audit(228.057:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21027 comm="syz.1.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83982bebe9 code=0x7ffc0000 [ 228.294801][T20847] syz.4.6873 (20847) used greatest stack depth: 6144 bytes left [ 228.347175][T21044] loop8: detected capacity change from 0 to 256 [ 228.554857][T21075] team0: No ports can be present during mode change [ 228.567481][T21076] netlink: 'syz.4.6938': attribute type 4 has an invalid length. [ 228.575324][T21076] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6938'. [ 229.177277][T21118] loop8: detected capacity change from 0 to 512 [ 229.192912][T21118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.206471][T21118] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.6956: iget: bad i_size value: 2533274857506816 [ 229.230578][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.076065][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6988'. [ 230.099944][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6988'. [ 230.129420][T21198] IPVS: Error connecting to the multicast addr [ 230.655825][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7022'. [ 231.482330][T21274] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7024'. [ 231.581194][T21278] loop8: detected capacity change from 0 to 2048 [ 231.621645][T21278] EXT4-fs (loop8): failed to initialize system zone (-117) [ 231.628972][T21278] EXT4-fs (loop8): mount failed [ 231.765242][T21227] Set syz1 is full, maxelem 65536 reached [ 231.797188][T21301] netlink: 'syz.1.7021': attribute type 10 has an invalid length. [ 231.960246][T21324] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7033'. [ 232.015503][T21331] rdma_op ffff88811cf74d80 conn xmit_rdma 0000000000000000 [ 232.052290][T21337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7040'. [ 232.226159][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7044'. [ 233.047616][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 233.047631][ T29] audit: type=1326 audit(233.028:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.090444][ T29] audit: type=1326 audit(233.068:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.113577][ T29] audit: type=1326 audit(233.068:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.136997][ T29] audit: type=1326 audit(233.078:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.186861][ T29] audit: type=1326 audit(233.098:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21369 comm="syz.6.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 233.189001][T21420] loop3: detected capacity change from 0 to 764 [ 233.210064][ T29] audit: type=1326 audit(233.098:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21369 comm="syz.6.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 233.240080][ T29] audit: type=1326 audit(233.148:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.263195][ T29] audit: type=1326 audit(233.148:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.286875][ T29] audit: type=1326 audit(233.148:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.310006][ T29] audit: type=1326 audit(233.148:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.8.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36e750ebe9 code=0x7ffc0000 [ 233.344516][T21420] rock: directory entry would overflow storage [ 233.350861][T21420] rock: sig=0x4f50, size=4, remaining=3 [ 233.356509][T21420] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 233.398909][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7073'. [ 233.408491][T21432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.417477][T21432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.663812][T21464] hub 6-0:1.0: USB hub found [ 233.676583][T21464] hub 6-0:1.0: 8 ports detected [ 233.918972][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7098'. [ 233.951273][T21505] macsec0: entered allmulticast mode [ 234.394929][ T4036] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.434897][ T4036] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.462217][ T4036] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.489791][ T4036] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.538901][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7120'. [ 234.567901][T21548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.625835][T21548] vlan2: entered allmulticast mode [ 234.631245][T21548] bond1: entered allmulticast mode [ 234.712450][T21547] lo speed is unknown, defaulting to 1000 [ 234.726713][ T4044] bridge_slave_1: left allmulticast mode [ 234.732479][ T4044] bridge_slave_1: left promiscuous mode [ 234.738267][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.791029][T21619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7126'. [ 234.829462][ T4044] bridge_slave_0: left allmulticast mode [ 234.835287][ T4044] bridge_slave_0: left promiscuous mode [ 234.841027][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.972620][ T4044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.982525][ T4044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.993044][ T4044] bond0 (unregistering): Released all slaves [ 235.007568][T21626] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7129'. [ 235.094685][ T4044] hsr_slave_0: left promiscuous mode [ 235.100951][ T4044] hsr_slave_1: left promiscuous mode [ 235.107180][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.116984][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.173114][ T4044] team0 (unregistering): Port device team_slave_1 removed [ 235.194156][ T4044] team0 (unregistering): Port device team_slave_0 removed [ 235.287855][T21547] chnl_net:caif_netlink_parms(): no params data found [ 235.351942][T21547] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.359178][T21547] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.367406][T21547] bridge_slave_0: entered allmulticast mode [ 235.379119][T21547] bridge_slave_0: entered promiscuous mode [ 235.386605][T21547] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.393824][T21547] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.402717][T21547] bridge_slave_1: entered allmulticast mode [ 235.409625][T21547] bridge_slave_1: entered promiscuous mode [ 235.441638][T21547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.471270][T21547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.520081][T21547] team0: Port device team_slave_0 added [ 235.529056][T21547] team0: Port device team_slave_1 added [ 235.554761][T21547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.561966][T21547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.588034][T21547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.599765][T21547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.606766][T21547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.632917][T21547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.662885][T21915] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7150'. [ 235.675794][T21547] hsr_slave_0: entered promiscuous mode [ 235.683392][T21547] hsr_slave_1: entered promiscuous mode [ 235.691664][T21547] debugfs: 'hsr0' already exists in 'hsr' [ 235.697444][T21547] Cannot create hsr debugfs directory [ 235.951643][T22018] loop8: detected capacity change from 0 to 1024 [ 235.971862][T22018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.026978][T21547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.039203][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.060511][T21547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.078751][T21547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.102286][T22044] macvtap0: refused to change device tx_queue_len [ 236.108795][T21547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.177794][T21547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.195729][T21547] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.207100][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.214372][ T4044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.231572][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.238665][ T4044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.330510][T21547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.402669][T21547] veth0_vlan: entered promiscuous mode [ 236.412247][T21547] veth1_vlan: entered promiscuous mode [ 236.443832][T22078] macvlan1: entered promiscuous mode [ 236.449996][T22078] ipvlan0: entered promiscuous mode [ 236.455790][T22078] ipvlan0: left promiscuous mode [ 236.461232][T22078] macvlan1: left promiscuous mode [ 236.485953][T21547] veth0_macvtap: entered promiscuous mode [ 236.493502][T21547] veth1_macvtap: entered promiscuous mode [ 236.507671][T21547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.529754][T21547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.547273][ T4044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.564119][T22091] __nla_validate_parse: 2 callbacks suppressed [ 236.564176][T22091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7166'. [ 236.566244][ T4044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.596523][T22091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.613596][ T4044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.627823][ T4044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.714784][T22139] wireguard0: entered promiscuous mode [ 236.720333][T22139] wireguard0: entered allmulticast mode [ 236.833107][T22160] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7184'. [ 237.194350][T22212] bridge0: port 1(macsec1) entered blocking state [ 237.200935][T22212] bridge0: port 1(macsec1) entered disabled state [ 237.259423][T22212] macsec1: entered allmulticast mode [ 237.264891][T22212] bridge0: entered allmulticast mode [ 237.289455][T22212] macsec1: left allmulticast mode [ 237.294548][T22212] bridge0: left allmulticast mode [ 237.383044][T22225] loop8: detected capacity change from 0 to 512 [ 237.431997][T22225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.866121][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.033805][T22261] loop8: detected capacity change from 0 to 1024 [ 238.053389][T22261] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 238.112707][T22261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.133961][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7218'. [ 238.187654][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 238.187669][ T29] audit: type=1400 audit(238.168:10279): avc: denied { setattr } for pid=22260 comm="syz.8.7217" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.232585][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.357053][ T29] audit: type=1400 audit(238.338:10280): avc: denied { create } for pid=22282 comm="syz.4.7223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 238.397475][ T29] audit: type=1326 audit(238.368:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.420737][ T29] audit: type=1326 audit(238.378:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.444417][ T29] audit: type=1326 audit(238.378:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.467477][ T29] audit: type=1326 audit(238.378:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.491223][ T29] audit: type=1326 audit(238.428:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.514475][ T29] audit: type=1326 audit(238.428:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.537682][ T29] audit: type=1326 audit(238.428:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.561156][ T29] audit: type=1326 audit(238.428:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22284 comm="syz.6.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 238.649602][T22293] wireguard0: entered promiscuous mode [ 238.655471][T22293] wireguard0: entered allmulticast mode [ 239.433092][T22330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7240'. [ 239.444598][T22330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7240'. [ 239.564856][T22340] wireguard0: entered promiscuous mode [ 239.570576][T22340] wireguard0: entered allmulticast mode [ 240.201366][T22333] Set syz1 is full, maxelem 65536 reached [ 240.610646][T22430] lo speed is unknown, defaulting to 1000 [ 240.747470][T22463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7280'. [ 240.767478][T22463] netlink: 5448 bytes leftover after parsing attributes in process `syz.6.7280'. [ 241.411700][T22538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22538 comm=syz.0.7306 [ 241.424489][T22538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22538 comm=syz.0.7306 [ 241.458978][T22541] wireguard0: entered promiscuous mode [ 241.464555][T22541] wireguard0: entered allmulticast mode [ 241.689895][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 241.697711][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 241.707423][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.715176][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.722935][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.730764][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.738418][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.746108][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.753924][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.762150][ T3369] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 241.773648][ T3369] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 241.836321][T22578] openvswitch: netlink: Message has 6 unknown bytes. [ 241.837389][T22580] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7318'. [ 241.892543][T22584] random: crng reseeded on system resumption [ 241.952338][T22594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7325'. [ 241.974073][T22592] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7324'. [ 242.020894][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7327'. [ 242.353022][T22634] loop8: detected capacity change from 0 to 512 [ 242.374686][T22634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.430524][T22651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7345'. [ 242.455158][T17890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.476651][T22671] loop8: detected capacity change from 0 to 512 [ 242.487392][T22671] EXT4-fs error (device loop8): __ext4_iget:5464: inode #2: block 1025: comm syz.8.7346: invalid block [ 242.500503][T22671] EXT4-fs (loop8): get root inode failed [ 242.506197][T22671] EXT4-fs (loop8): mount failed [ 242.783082][T22690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.817170][T22694] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 242.838473][T22690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.856278][T22697] netlink: '+}[@': attribute type 1 has an invalid length. [ 242.875889][T22697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.924348][T22690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.981754][T22744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7362'. [ 243.032130][T22690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.140122][ T4063] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.164159][ T4063] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.189854][ T4063] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.215216][ T4063] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.240022][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7365'. [ 243.381000][T22791] bridge0: entered promiscuous mode [ 243.393560][T22791] bridge0: port 1(macsec1) entered blocking state [ 243.400225][T22791] bridge0: port 1(macsec1) entered disabled state [ 243.410648][T22791] macsec1: entered allmulticast mode [ 243.416058][T22791] bridge0: entered allmulticast mode [ 243.423525][T22791] macsec1: left allmulticast mode [ 243.428660][T22791] bridge0: left allmulticast mode [ 243.444402][T22791] bridge0: left promiscuous mode [ 243.521292][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 243.521307][ T29] audit: type=1326 audit(243.508:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.608917][ T29] audit: type=1326 audit(243.508:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.632027][ T29] audit: type=1326 audit(243.508:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.655217][ T29] audit: type=1326 audit(243.508:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.678498][ T29] audit: type=1326 audit(243.508:10513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.701751][ T29] audit: type=1326 audit(243.508:10514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.725432][ T29] audit: type=1326 audit(243.508:10515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.748442][ T29] audit: type=1326 audit(243.508:10516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.771503][ T29] audit: type=1326 audit(243.508:10517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.794627][ T29] audit: type=1326 audit(243.508:10518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22815 comm="syz.6.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 243.939633][T22825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7382'. [ 243.965995][T22828] openvswitch: netlink: Message has 6 unknown bytes. [ 244.026806][T22834] random: crng reseeded on system resumption [ 244.052155][ T4059] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.087482][ T4059] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.106272][ T4059] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.118153][ T4059] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.339262][T22844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7388'. [ 244.550315][T22870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7396'. [ 244.564372][T22871] rdma_op ffff88811d3b2980 conn xmit_rdma 0000000000000000 [ 244.646810][T22832] Set syz1 is full, maxelem 65536 reached [ 244.735474][T22881] hub 9-0:1.0: USB hub found [ 244.758493][T22881] hub 9-0:1.0: 8 ports detected [ 244.950472][T22917] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 244.950472][T22917] program syz.8.7413 not setting count and/or reply_len properly [ 245.146556][T22930] usb usb1: check_ctrlrecip: process 22930 (syz.6.7419) requesting ep 01 but needs 81 [ 245.156636][T22930] usb usb1: usbfs: process 22930 (syz.6.7419) did not claim interface 0 before use [ 245.420267][T22921] Set syz1 is full, maxelem 65536 reached [ 245.672766][T22953] netlink: 'syz.4.7432': attribute type 1 has an invalid length. [ 246.077915][T22967] Set syz1 is full, maxelem 65536 reached [ 246.225089][T22989] bridge0: port 2(macsec1) entered blocking state [ 246.231675][T22989] bridge0: port 2(macsec1) entered disabled state [ 246.239513][T22989] macsec1: entered allmulticast mode [ 246.244830][T22989] bridge0: entered allmulticast mode [ 246.277268][T22989] macsec1: left allmulticast mode [ 246.282405][T22989] bridge0: left allmulticast mode [ 246.614053][T23059] tipc: New replicast peer: 100.1.1.1 [ 246.619717][T23059] tipc: Enabled bearer , priority 10 [ 247.037016][T23075] Set syz1 is full, maxelem 65536 reached [ 247.191700][T23126] ------------[ cut here ]------------ [ 247.197193][T23126] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 247.216023][T23126] WARNING: CPU: 1 PID: 23126 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 247.226662][T23126] Modules linked in: [ 247.230605][T23126] CPU: 1 UID: 0 PID: 23126 Comm: syz.4.7494 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.240456][T23126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.250618][T23126] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 247.256917][T23126] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 b2 7f ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 247.277081][T23126] RSP: 0018:ffffc9000561b440 EFLAGS: 00010292 [ 247.283394][T23126] RAX: 8614832d43d4bb00 RBX: ffff888119400310 RCX: 0000000000080000 [ 247.291431][T23126] RDX: ffffc90003fe0000 RSI: 0000000000005bd8 RDI: 0000000000005bd9 [ 247.299467][T23126] RBP: 0000000000000000 R08: 0001c9000561b27f R09: 0000000000000000 [ 247.307603][T23126] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881194002d0 [ 247.315628][T23126] R13: ffff88817f410000 R14: ffff88817f410000 R15: ffff888119400308 [ 247.323634][T23126] FS: 00007f073d50f6c0(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 247.332820][T23126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.339481][T23126] CR2: 0000000000000000 CR3: 000000011e9d4000 CR4: 00000000003506f0 [ 247.347456][T23126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.355539][T23126] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 247.363705][T23126] Call Trace: [ 247.366982][T23126] [ 247.369956][T23126] reg_set_min_max+0x215/0x260 [ 247.374951][T23126] check_cond_jmp_op+0x1013/0x16e0 [ 247.380181][T23126] do_check+0x332a/0x7a10 [ 247.384553][T23126] do_check_common+0xc3a/0x12a0 [ 247.389690][T23126] bpf_check+0x942b/0xd9e0 [ 247.389731][T23126] ? __rcu_read_unlock+0x4f/0x70 [ 247.399098][T23126] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 247.405160][T23126] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 247.410962][T23126] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 247.416886][T23126] ? pcpu_block_update+0x24e/0x3b0 [ 247.422115][T23126] ? _find_next_zero_bit+0x64/0xa0 [ 247.427282][T23126] ? pcpu_block_refresh_hint+0x157/0x170 [ 247.433065][T23126] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 247.439171][T23126] ? css_rstat_updated+0xb7/0x240 [ 247.444232][T23126] ? __rcu_read_unlock+0x4f/0x70 [ 247.449191][T23126] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 247.455009][T23126] ? selinux_bpf_prog_load+0x36/0xf0 [ 247.460519][T23126] ? __kmalloc_cache_noprof+0x299/0x320 [ 247.466086][T23126] ? selinux_bpf_prog_load+0xbf/0xf0 [ 247.471442][T23126] ? security_bpf_prog_load+0x2c/0xa0 [ 247.476826][T23126] bpf_prog_load+0xedd/0x1070 [ 247.481782][T23126] ? security_bpf+0x2b/0x90 [ 247.486325][T23126] __sys_bpf+0x462/0x7b0 [ 247.490848][T23126] __x64_sys_bpf+0x41/0x50 [ 247.495293][T23126] x64_sys_call+0x2aea/0x2ff0 [ 247.500185][T23126] do_syscall_64+0xd2/0x200 [ 247.504692][T23126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.510841][T23126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 247.516593][T23126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.522640][T23126] RIP: 0033:0x7f073eaaebe9 [ 247.527166][T23126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.546799][T23126] RSP: 002b:00007f073d50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.555269][T23126] RAX: ffffffffffffffda RBX: 00007f073ecd5fa0 RCX: 00007f073eaaebe9 [ 247.563292][T23126] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 247.571402][T23126] RBP: 00007f073eb31e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.579485][T23126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.587461][T23126] R13: 00007f073ecd6038 R14: 00007f073ecd5fa0 R15: 00007fffa48888c8 [ 247.595919][T23126] [ 247.599012][T23126] ---[ end trace 0000000000000000 ]--- [ 247.647558][T23133] __nla_validate_parse: 3 callbacks suppressed [ 247.647574][T23133] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7498'. [ 247.694679][T23140] pim6reg1: entered promiscuous mode [ 247.700075][T23140] pim6reg1: entered allmulticast mode [ 247.738660][ T3397] tipc: Node number set to 2732504081 [ 247.858421][T23157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.870947][T23157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.998911][T23184] tipc: Enabling of bearer rejected, already enabled [ 248.507594][T23216] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 248.665845][T23226] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7532'. [ 248.678663][T23228] netlink: 'syz.6.7533': attribute type 1 has an invalid length. [ 248.686609][T23228] netlink: 'syz.6.7533': attribute type 4 has an invalid length. [ 248.694871][T23228] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.7533'. [ 248.716397][T23228] netlink: 'syz.6.7533': attribute type 1 has an invalid length. [ 248.724405][T23228] netlink: 'syz.6.7533': attribute type 4 has an invalid length. [ 248.732153][T23228] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.7533'. [ 248.820490][T23237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7538'. [ 248.844912][T23239] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.903392][T23239] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.933594][T23251] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 248.970246][T23239] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.039956][T23239] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.052013][T23272] netlink: 'syz.4.7550': attribute type 4 has an invalid length. [ 249.061697][T23272] netlink: 'syz.4.7550': attribute type 4 has an invalid length. [ 249.134667][ T4074] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.150951][ T4074] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.163026][ T4074] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.191794][ T4074] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.356760][T23299] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 249.367639][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 249.367654][ T29] audit: type=1326 audit(249.348:10629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.399894][ T3699] Process accounting resumed [ 249.531508][ T29] audit: type=1326 audit(249.348:10630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.554568][ T29] audit: type=1326 audit(249.348:10631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53b8fad550 code=0x7ffc0000 [ 249.577586][ T29] audit: type=1326 audit(249.348:10632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.600876][ T29] audit: type=1326 audit(249.348:10633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.623887][ T29] audit: type=1326 audit(249.388:10634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.646768][ T29] audit: type=1326 audit(249.388:10635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.669952][ T29] audit: type=1326 audit(249.388:10636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.693258][ T29] audit: type=1326 audit(249.388:10637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.716575][ T29] audit: type=1326 audit(249.388:10638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23300 comm="syz.6.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f53b8faebe9 code=0x7ffc0000 [ 249.716836][T23303] bond0: (slave macvlan2): Releasing backup interface [ 249.835824][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7560'. [ 249.844962][T23327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7560'. [ 249.854133][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7560'. [ 249.877805][T23327] netlink: 'syz.1.7560': attribute type 6 has an invalid length. [ 250.423983][T23375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.521320][T23375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.591039][T23375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.669918][T23375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.733891][ T4069] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.745466][ T4069] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.756453][ T4069] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.768803][ T4074] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.992653][T23422] ================================================================== [ 251.000882][T23422] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 251.009574][T23422] [ 251.011977][T23422] write to 0xffff88816995b6a8 of 8 bytes by task 23427 on cpu 1: [ 251.019704][T23422] shmem_file_splice_read+0x470/0x600 [ 251.025099][T23422] splice_direct_to_actor+0x26f/0x680 [ 251.030470][T23422] do_splice_direct+0xda/0x150 [ 251.035233][T23422] do_sendfile+0x380/0x650 [ 251.039710][T23422] __x64_sys_sendfile64+0x105/0x150 [ 251.044986][T23422] x64_sys_call+0x2bb0/0x2ff0 [ 251.049662][T23422] do_syscall_64+0xd2/0x200 [ 251.054168][T23422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.060071][T23422] [ 251.062387][T23422] write to 0xffff88816995b6a8 of 8 bytes by task 23422 on cpu 0: [ 251.070182][T23422] shmem_file_splice_read+0x470/0x600 [ 251.075569][T23422] splice_direct_to_actor+0x26f/0x680 [ 251.080934][T23422] do_splice_direct+0xda/0x150 [ 251.085715][T23422] do_sendfile+0x380/0x650 [ 251.090212][T23422] __x64_sys_sendfile64+0x105/0x150 [ 251.095506][T23422] x64_sys_call+0x2bb0/0x2ff0 [ 251.100269][T23422] do_syscall_64+0xd2/0x200 [ 251.104771][T23422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.110776][T23422] [ 251.113081][T23422] value changed: 0x00000000000062d9 -> 0x00000000000062ee [ 251.120166][T23422] [ 251.122473][T23422] Reported by Kernel Concurrency Sanitizer on: [ 251.128639][T23422] CPU: 0 UID: 0 PID: 23422 Comm: syz.1.7597 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.139994][T23422] Tainted: [W]=WARN [ 251.143877][T23422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.153950][T23422] ==================================================================