last executing test programs: 12m19.755431251s ago: executing program 0 (id=38): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x100b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) listen(r6, 0x7f) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) close(0x3) read(r8, &(0x7f0000000340)=""/209, 0xd1) 12m19.505896972s ago: executing program 0 (id=39): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x8100, &(0x7f0000000080), 0x3, 0x50a, &(0x7f00000001c0)="$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") r0 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000280)={'bond0\x00', @ifru_names='veth0_virt_wifi\x00'}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000001240)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x1) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14) r3 = inotify_init1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000d16) lsetxattr$security_capability(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r5 = socket(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) getsockopt(r5, 0xff, 0x100000000000001, 0x0, 0x0) 12m19.127396508s ago: executing program 0 (id=43): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r3, 0x0, 0x1000}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x4, 0x0, &(0x7f0000000000)="219a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) r5 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockname(r6, 0x0, &(0x7f0000000300)) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x80000000000008) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/15) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x48}, 0x0) 12m18.681712257s ago: executing program 0 (id=44): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, 0x0, 0x7}, 0x80, 0x0}}], 0x1, 0x80) geteuid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000780), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xff000000, 0xff], 'syzkaller0\x00', 'gretap0\x00', {0xff}, {}, 0x3b, 0x4, 0x6}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xd5, 0x2, 0x10, 'syz1\x00', 'syz1\x00', {0x8000000000000001}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x10001, 0x3, '\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) 12m17.279622628s ago: executing program 0 (id=51): r0 = open(&(0x7f0000000000)='./file0\x00', 0x141000, 0x4c) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18c, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xd29d}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xb98d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xbf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x7c00, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac00bc0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xe9}], 0x1}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40600, 0x0) read$ptp(r7, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) getpid() ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 12m16.115588308s ago: executing program 0 (id=59): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='vm_unmapped_area\x00', r0, 0x0, 0x2}, 0x18) io_setup(0x3, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) msgget$private(0x0, 0x3ac) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 12m16.115277798s ago: executing program 32 (id=59): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='vm_unmapped_area\x00', r0, 0x0, 0x2}, 0x18) io_setup(0x3, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) msgget$private(0x0, 0x3ac) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 11m44.255700692s ago: executing program 3 (id=238): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) signalfd(r0, &(0x7f0000000080), 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x280002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) signalfd(r0, &(0x7f0000000100), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000010000000000049500"/24, @ANYRESOCT=r2, @ANYRESOCT=r3], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000b00000000000002050000000500000002000006040000000d00000000ef00000c0000000e000000002e0000"], &(0x7f00000003c0)=""/65, 0x44, 0x41, 0x0, 0x1000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x141000, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x29a000, 0x82) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000300)=r9}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) 11m43.389205979s ago: executing program 3 (id=243): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 11m42.326317285s ago: executing program 3 (id=248): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001900000019000000020000c5061a7d23c5ae3177e4a00f3c4c8821d36700"], 0x0, 0x36, 0x0, 0x1, 0x100}, 0x28) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x229, &(0x7f0000000b80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB], 0xfd1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x2000002, 0x88, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000"], 0xcc, 0x0) msgctl$IPC_RMID(r0, 0x0) 11m41.395096395s ago: executing program 3 (id=251): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)="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"}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 11m40.032804374s ago: executing program 3 (id=257): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) time(&(0x7f00000002c0)) mprotect(&(0x7f00005b5000/0x2000)=nil, 0x2000, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 11m39.733020167s ago: executing program 3 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m39.732906977s ago: executing program 33 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m36.2288459s ago: executing program 5 (id=4664): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) 5m36.121615214s ago: executing program 5 (id=4669): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000041300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000000000a0060803b", @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 5m36.107135175s ago: executing program 5 (id=4672): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f00)=[{&(0x7f0000000040)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0x6, 0xd, 0x82be}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x38, 0x800}], 0x1, 0x44000) 5m36.052786777s ago: executing program 5 (id=4674): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 5m35.935462172s ago: executing program 5 (id=4675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f00000013c0)='./file0\x00', 0x0, 0x206002, 0x0) 5m35.919135143s ago: executing program 5 (id=4676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r2, 0x0, 0x0, 0x530, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 5m20.673612191s ago: executing program 34 (id=4676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r2, 0x0, 0x0, 0x530, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2.668931496s ago: executing program 2 (id=8933): bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r3], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00@{', @ANYRES16=r6, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x20004882) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone3(&(0x7f0000000280)={0x40142300, 0x0, 0x0, 0x0, {0x100001}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.587544369s ago: executing program 1 (id=8935): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 2.509952303s ago: executing program 1 (id=8936): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) 2.509183723s ago: executing program 2 (id=8937): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.470179944s ago: executing program 4 (id=8938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r3], 0x40}}, 0x4008054) fchdir(r0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@remote, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x500, 0xffffffff, 0x120, 0x120, 0x398, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x1, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x6, 0xe, [0x37, 0x12, 0xb, 0x6, 0x10, 0x37, 0x2a, 0x3d, 0x1b, 0x14, 0x15, 0x32, 0x1e, 0x31, 0x32, 0x16], 0x0, 0xffffff2e, 0x81}}}, {{@uncond, 0x0, 0x150, 0x278, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@remote, [0xff000000, 0xff000000, 0x0, 0xff], @ipv4=@private=0xa010102, [0x0, 0x0, 0xffffff00, 0xffffffff], @ipv6=@private0, [0x0, 0x0, 0xffffff00, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0xffff, 0x1, 0xff, 0x4e21, 0x4e20, 0x4e20, 0x4e22, 0x3000, 0x200}, 0xc0}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80, 'system_u:object_r:ptmx_t:s0\x00'}}}, {{@ip={@broadcast, @remote, 0xffffff00, 0xff000000, 'veth0_macvtap\x00', 'dummy0\x00', {}, {}, 0x62, 0x2, 0x13}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x2, 0xa, 0x4, 0x5, 0x4], 0x3, 0x4}, {0x4, [0x2, 0xc, 0x1, 0x0, 0x2, 0x6], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 2.382815739s ago: executing program 4 (id=8940): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") 2.301023702s ago: executing program 1 (id=8941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.275104153s ago: executing program 1 (id=8942): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2.09993527s ago: executing program 7 (id=8943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000060005"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.065831952s ago: executing program 7 (id=8944): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.745889516s ago: executing program 7 (id=8946): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.723204336s ago: executing program 7 (id=8948): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) r1 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/248, 0xf8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0) 1.673824349s ago: executing program 6 (id=8949): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000c00340000003401000006000000040000000000000e0400000000002e47761932b30b0000000000000000000d00000000000000000000001304000000000000000000000a030000"], 0x0, 0x52}, 0x20) preadv(r1, 0x0, 0x0, 0x6, 0x80000001) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="021305091200000029bd7000ffdbdf25010015004e2000000800120000000300000000000104000006006c00fc810000ae04000000000000ac1414aa000000000000000000000000ff020000000000000000000000000001010015004e23000005001a0020010000000700000000000000000001ac1414aa0000000000000000000000001d0004140100140030000000"], 0x90}}, 0x4000815) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000500)={r4, 0xfc, 0x69}, 0x0, &(0x7f0000001880)="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", &(0x7f0000000680)=""/105) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x7ff}, 0x18) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) 1.6294805s ago: executing program 2 (id=8950): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 1.437578119s ago: executing program 4 (id=8951): r0 = syz_open_procfs(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_getevents(r2, 0x3, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000c00340000003401000006000000040000000000000e0400000000002e47761932b30b0000000000000000000d00000000000000000000001304000000000000000000000a030000"], 0x0, 0x52}, 0x20) preadv(r1, 0x0, 0x0, 0x6, 0x80000001) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="021305091200000029bd7000ffdbdf25010015004e2000000800120000000300000000000104000006006c00fc810000ae04000000000000ac1414aa000000000000000000000000ff020000000000000000000000000001010015004e23000005001a0020010000000700000000000000000001ac1414aa0000000000000000000000001d0004140100140030000000"], 0x90}}, 0x4000815) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 1.381696481s ago: executing program 6 (id=8952): bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r3], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00@{', @ANYRES16=r6, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x20004882) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone3(&(0x7f0000000280)={0x40142300, 0x0, 0x0, 0x0, {0x100001}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.343249212s ago: executing program 1 (id=8953): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) getrandom(&(0x7f0000000b40)=""/4096, 0x1000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x200000c4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) clock_getres(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00']) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r4, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.255918106s ago: executing program 4 (id=8954): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)}], 0x1) 908.434071ms ago: executing program 4 (id=8955): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write$binfmt_format(r2, &(0x7f00000001c0)='0\x00', 0x2) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 907.229881ms ago: executing program 6 (id=8956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write$binfmt_format(r2, &(0x7f00000001c0)='0\x00', 0x2) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 870.117743ms ago: executing program 7 (id=8957): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 750.730608ms ago: executing program 2 (id=8958): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200"], 0x40}}, 0x4008054) fchdir(r0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@remote, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r5}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x500, 0xffffffff, 0x120, 0x120, 0x398, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x1, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x6, 0xe, [0x37, 0x12, 0xb, 0x6, 0x10, 0x37, 0x2a, 0x3d, 0x1b, 0x14, 0x15, 0x32, 0x1e, 0x31, 0x32, 0x16], 0x0, 0xffffff2e, 0x81}}}, {{@uncond, 0x0, 0x150, 0x278, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@remote, [0xff000000, 0xff000000, 0x0, 0xff], @ipv4=@private=0xa010102, [0x0, 0x0, 0xffffff00, 0xffffffff], @ipv6=@private0, [0x0, 0x0, 0xffffff00, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0xffff, 0x1, 0xff, 0x4e21, 0x4e20, 0x4e20, 0x4e22, 0x3000, 0x200}, 0xc0}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80, 'system_u:object_r:ptmx_t:s0\x00'}}}, {{@ip={@broadcast, @remote, 0xffffff00, 0xff000000, 'veth0_macvtap\x00', 'dummy0\x00', {}, {}, 0x62, 0x2, 0x13}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x2, 0xa, 0x4, 0x5, 0x4], 0x3, 0x4}, {0x4, [0x2, 0xc, 0x1, 0x0, 0x2, 0x6], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 645.908592ms ago: executing program 2 (id=8959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 453.566131ms ago: executing program 2 (id=8960): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write$binfmt_format(r2, &(0x7f00000001c0)='0\x00', 0x2) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 445.138591ms ago: executing program 1 (id=8961): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write$binfmt_format(r2, &(0x7f00000001c0)='0\x00', 0x2) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 236.49617ms ago: executing program 6 (id=8962): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000c00340000003401000006000000040000000000000e0400000000002e47761932b30b0000000000000000000d00000000000000000000001304000000000000000000000a030000"], 0x0, 0x52}, 0x20) preadv(r1, 0x0, 0x0, 0x6, 0x80000001) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="021305091200000029bd7000ffdbdf25010015004e2000000800120000000300000000000104000006006c00fc810000ae04000000000000ac1414aa000000000000000000000000ff020000000000000000000000000001010015004e23000005001a0020010000000700000000000000000001ac1414aa0000000000000000000000001d0004140100140030000000"], 0x90}}, 0x4000815) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000500)={r4, 0xfc, 0x69}, 0x0, &(0x7f0000001880)="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", &(0x7f0000000680)=""/105) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x7ff}, 0x18) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) 172.467353ms ago: executing program 4 (id=8963): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 88.714896ms ago: executing program 6 (id=8964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 629.85µs ago: executing program 6 (id=8965): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073015f00000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r1, r3, 0x8f5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x17, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 7 (id=8966): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r2, 0x5429, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device batadv0 [ 572.906955][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6661'. [ 572.932097][T23940] veth0_vlan: entered promiscuous mode [ 572.949372][T23940] veth1_vlan: entered promiscuous mode [ 572.989962][T23940] veth0_macvtap: entered promiscuous mode [ 573.081117][T23940] veth1_macvtap: entered promiscuous mode [ 573.094203][T23940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.106412][T23940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.117871][T13633] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.536849][T24260] netlink: 'syz.7.6673': attribute type 1 has an invalid length. [ 573.563579][T13626] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.572557][T13626] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.581380][T13626] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.357284][T24297] netlink: 'syz.7.6686': attribute type 1 has an invalid length. [ 574.491751][T24306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6690'. [ 574.955727][T24325] loop7: detected capacity change from 0 to 128 [ 575.027041][T24325] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 575.091036][T24325] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.818798][T19006] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.823213][T24359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6708'. [ 575.859541][ T29] audit: type=1400 audit(1764200284.124:83443): avc: denied { nlmsg_write } for pid=24358 comm="syz.6.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 577.949621][T24435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6737'. [ 578.557980][T24464] syzkaller0: entered promiscuous mode [ 578.563754][T24464] syzkaller0: entered allmulticast mode [ 578.616013][T24467] netlink: 'syz.6.6750': attribute type 1 has an invalid length. [ 579.434258][T24506] hub 2-0:1.0: USB hub found [ 579.439095][T24506] hub 2-0:1.0: 8 ports detected [ 579.545257][T24505] syzkaller0: entered promiscuous mode [ 579.550815][T24505] syzkaller0: entered allmulticast mode [ 579.760644][T24510] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6767'. [ 579.772861][T24510] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6767'. [ 580.119804][T24525] hub 2-0:1.0: USB hub found [ 580.134332][T24525] hub 2-0:1.0: 8 ports detected [ 581.318026][T24559] vlan2: entered allmulticast mode [ 581.690742][T24570] hub 2-0:1.0: USB hub found [ 581.695428][T24570] hub 2-0:1.0: 8 ports detected [ 582.025870][T24587] hub 2-0:1.0: USB hub found [ 582.030820][T24587] hub 2-0:1.0: 8 ports detected [ 582.366752][T24603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6806'. [ 582.412586][T24603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6806'. [ 582.489616][T24605] hub 2-0:1.0: USB hub found [ 582.494399][T24605] hub 2-0:1.0: 8 ports detected [ 582.857843][T24641] syz_tun: entered allmulticast mode [ 582.868319][T24644] loop7: detected capacity change from 0 to 128 [ 582.877008][T24641] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 582.885591][T24641] mroute: pending queue full, dropping entries [ 583.003098][T24648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6818'. [ 583.775800][T24653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6827'. [ 583.824766][T24640] syz_tun: left allmulticast mode [ 583.830815][T24644] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 583.859527][T24644] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.121027][T24671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6834'. [ 584.239715][T19006] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 584.259429][T24675] netlink: 'syz.6.6836': attribute type 1 has an invalid length. [ 584.328413][T24677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6838'. [ 584.427030][ T29] audit: type=1400 audit(1764200292.687:83444): avc: denied { listen } for pid=24682 comm="syz.7.6837" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.512965][ T29] audit: type=1400 audit(1764200292.777:83445): avc: denied { getopt } for pid=24681 comm="syz.6.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 584.860868][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6847'. [ 584.985337][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6850'. [ 585.001331][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6847'. [ 585.023032][T24708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6851'. [ 585.473457][T24734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6862'. [ 585.484487][T24734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6862'. [ 586.842284][T24794] syzkaller0: entered promiscuous mode [ 586.847841][T24794] syzkaller0: entered allmulticast mode [ 587.446626][T14743] IPVS: starting estimator thread 0... [ 587.543877][T24827] syzkaller0: entered promiscuous mode [ 587.549492][T24827] syzkaller0: entered allmulticast mode [ 587.717490][T24840] IPVS: using max 2400 ests per chain, 120000 per kthread [ 588.188144][T24857] __nla_validate_parse: 4 callbacks suppressed [ 588.188162][T24857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6910'. [ 588.471156][T24861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6910'. [ 588.706625][T24866] loop7: detected capacity change from 0 to 128 [ 588.725066][T24866] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 588.767303][T24866] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.144158][T24882] syzkaller0: entered promiscuous mode [ 589.149801][T24882] syzkaller0: entered allmulticast mode [ 589.579227][T19006] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.494892][T24912] loop7: detected capacity change from 0 to 128 [ 590.513225][T24898] Set syz1 is full, maxelem 65536 reached [ 590.596189][T24912] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 590.751645][T24912] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.763353][T24925] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6940'. [ 591.084759][T24928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6939'. [ 591.173645][T24928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6939'. [ 591.368637][T19006] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.409195][T24941] hub 2-0:1.0: USB hub found [ 591.414078][T24941] hub 2-0:1.0: 8 ports detected [ 591.795582][T24952] tipc: Started in network mode [ 591.800586][T24952] tipc: Node identity ac141441, cluster identity 4711 [ 591.819544][T24952] tipc: Enabled bearer , priority 10 [ 591.872267][T24959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6952'. [ 591.974662][T24965] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6954'. [ 592.318020][T24987] tipc: Started in network mode [ 592.323055][T24987] tipc: Node identity ac141441, cluster identity 4711 [ 592.381946][T24987] tipc: Enabled bearer , priority 10 [ 592.879748][T25018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.901905][T25018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.956289][ T23] tipc: Node number set to 2886997057 [ 593.441807][ T23] tipc: Node number set to 2886997057 [ 593.557551][T25049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6988'. [ 594.058853][T25059] syzkaller0: entered promiscuous mode [ 594.064377][T25059] syzkaller0: entered allmulticast mode [ 594.377612][T25079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7005'. [ 594.387057][ T29] audit: type=1400 audit(1764200302.631:83446): avc: denied { read append } for pid=25076 comm="syz.1.7004" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 594.575435][T25079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7005'. [ 594.708106][T25066] Set syz1 is full, maxelem 65536 reached [ 594.739470][T25093] xt_limit: Overflow, try lower: 167772/2147483648 [ 594.774708][T25087] syzkaller0: entered promiscuous mode [ 594.780315][T25087] syzkaller0: entered allmulticast mode [ 595.770192][T25119] hub 2-0:1.0: USB hub found [ 595.775648][T25119] hub 2-0:1.0: 8 ports detected [ 595.916455][ T29] audit: type=1400 audit(1764200304.191:83447): avc: denied { mount } for pid=25112 comm="syz.7.7017" name="/" dev="configfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 596.200377][ T29] audit: type=1400 audit(1764200304.211:83448): avc: denied { read } for pid=25112 comm="syz.7.7017" name="/" dev="configfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 596.223473][ T29] audit: type=1400 audit(1764200304.211:83449): avc: denied { open } for pid=25112 comm="syz.7.7017" path="/441/file0" dev="configfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 596.291855][T25128] pimreg: entered allmulticast mode [ 596.307704][T25130] loop7: detected capacity change from 0 to 128 [ 596.314763][ T29] audit: type=1400 audit(1764200304.561:83450): avc: denied { unmount } for pid=19006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 596.340380][T25130] FAT-fs (loop7): error, clusters badly computed (4 != 3) [ 596.347583][T25130] FAT-fs (loop7): Filesystem has been set read-only [ 596.354329][T25130] FAT-fs (loop7): error, clusters badly computed (5 != 4) [ 596.361799][T25130] FAT-fs (loop7): error, clusters badly computed (6 != 5) [ 596.919594][T25150] loop7: detected capacity change from 0 to 164 [ 596.953159][T25150] Unable to read rock-ridge attributes [ 597.522239][T25163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7036'. [ 598.060323][T25174] hub 2-0:1.0: USB hub found [ 598.065065][T25174] hub 2-0:1.0: 8 ports detected [ 598.606091][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7041'. [ 598.771250][T25180] tipc: Enabling of bearer rejected, already enabled [ 600.071111][T25204] loop7: detected capacity change from 0 to 2048 [ 600.767712][T25230] syzkaller0: entered promiscuous mode [ 600.773361][T25230] syzkaller0: entered allmulticast mode [ 600.786499][T25229] hub 2-0:1.0: USB hub found [ 600.791289][T25229] hub 2-0:1.0: 8 ports detected [ 602.237347][T25269] syzkaller0: entered promiscuous mode [ 602.242924][T25269] syzkaller0: entered allmulticast mode [ 602.318715][T25274] ip6gre1: entered promiscuous mode [ 603.022065][T25286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7082'. [ 603.157629][T25286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7082'. [ 605.033580][ T29] audit: type=1400 audit(1764200313.301:83451): avc: denied { module_load } for pid=25345 comm="syz.6.7104" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 605.310100][T25355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7107'. [ 605.334300][T25355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7107'. [ 605.962448][T25372] syzkaller0: entered promiscuous mode [ 605.968768][T25372] syzkaller0: entered allmulticast mode [ 606.709884][T25398] syz_tun: entered promiscuous mode [ 606.756625][T25398] vlan2: entered promiscuous mode [ 607.033729][T25421] loop7: detected capacity change from 0 to 1024 [ 607.042445][T25421] EXT4-fs: Ignoring removed nobh option [ 607.048886][T25421] EXT4-fs: Ignoring removed bh option [ 607.066018][T25421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.092263][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.409353][T25432] hub 2-0:1.0: USB hub found [ 607.414306][T25432] hub 2-0:1.0: 8 ports detected [ 607.498566][T25434] syzkaller0: entered promiscuous mode [ 607.504119][T25434] syzkaller0: entered allmulticast mode [ 608.931875][T25460] syzkaller0: entered promiscuous mode [ 608.938786][T25460] syzkaller0: entered allmulticast mode [ 609.260003][T25481] xt_CT: No such helper "netbios-ns" [ 610.230296][T25509] hub 2-0:1.0: USB hub found [ 610.235219][T25509] hub 2-0:1.0: 8 ports detected [ 610.399797][T25513] netlink: 'syz.2.7165': attribute type 1 has an invalid length. [ 610.602803][T25525] syzkaller0: entered promiscuous mode [ 610.608458][T25525] syzkaller0: entered allmulticast mode [ 610.737149][T25530] loop6: detected capacity change from 0 to 256 [ 610.889376][T25530] FAT-fs (loop6): codepage cp936 not found [ 611.247486][T25542] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7176'. [ 611.267399][T25542] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7176'. [ 611.542279][T25555] syzkaller0: entered promiscuous mode [ 611.547931][T25555] syzkaller0: entered allmulticast mode [ 611.734670][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7186'. [ 611.764698][T25564] hub 2-0:1.0: USB hub found [ 611.769612][T25564] hub 2-0:1.0: 8 ports detected [ 612.169895][T25568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7188'. [ 612.181112][T25568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7188'. [ 613.088301][T25593] syzkaller0: entered promiscuous mode [ 613.093884][T25593] syzkaller0: entered allmulticast mode [ 614.706848][T25630] sctp: [Deprecated]: syz.7.7204 (pid 25630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.706848][T25630] Use struct sctp_sack_info instead [ 614.732594][T25631] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7209'. [ 614.882709][T25630] loop7: detected capacity change from 0 to 512 [ 614.925902][T25630] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 614.981342][T25632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7210'. [ 615.099179][T25630] EXT4-fs (loop7): orphan cleanup on readonly fs [ 615.105892][T25630] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.7204: bad orphan inode 15 [ 615.116332][T25630] ext4_test_bit(bit=14, block=18) = 1 [ 615.121733][T25630] is_bad_inode(inode)=0 [ 615.125976][T25630] NEXT_ORPHAN(inode)=1023 [ 615.130317][T25630] max_ino=32 [ 615.133579][T25630] i_nlink=0 [ 615.140464][T25630] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7204: bg 0: block 161: padding at end of block bitmap is not set [ 615.155223][T25630] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 615.165715][T25630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 615.416212][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.087220][T25650] hub 2-0:1.0: USB hub found [ 616.092594][T25650] hub 2-0:1.0: 8 ports detected [ 616.844879][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7226'. [ 616.885475][T25680] loop7: detected capacity change from 0 to 512 [ 616.899426][T25680] EXT4-fs: Ignoring removed i_version option [ 616.905602][T25680] EXT4-fs: Ignoring removed bh option [ 616.930280][T25680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.943304][T25680] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.022557][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.078429][T25687] syzkaller0: entered promiscuous mode [ 617.084002][T25687] syzkaller0: entered allmulticast mode [ 617.548417][T25705] sctp: [Deprecated]: syz.6.7230 (pid 25705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.548417][T25705] Use struct sctp_sack_info instead [ 618.296911][T25711] loop6: detected capacity change from 0 to 512 [ 619.324524][T25711] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 619.334195][T25711] EXT4-fs (loop6): orphan cleanup on readonly fs [ 619.340685][T25711] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.7230: bad orphan inode 15 [ 619.351552][T25711] ext4_test_bit(bit=14, block=18) = 1 [ 619.357987][T25711] is_bad_inode(inode)=0 [ 619.362194][T25711] NEXT_ORPHAN(inode)=1023 [ 619.366617][T25711] max_ino=32 [ 619.369851][T25711] i_nlink=0 [ 619.374566][T25711] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7230: bg 0: block 161: padding at end of block bitmap is not set [ 619.390575][T25711] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 619.400787][T25711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 619.944491][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.157918][T25739] loop6: detected capacity change from 0 to 1024 [ 620.166590][T25739] EXT4-fs: dax option not supported [ 620.970746][T25762] sctp: [Deprecated]: syz.7.7254 (pid 25762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.970746][T25762] Use struct sctp_sack_info instead [ 622.100499][T25782] sctp: [Deprecated]: syz.4.7257 (pid 25782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.100499][T25782] Use struct sctp_sack_info instead [ 622.902222][T25787] hub 2-0:1.0: USB hub found [ 622.907177][T25787] hub 2-0:1.0: 8 ports detected [ 623.245942][T25800] sctp: [Deprecated]: syz.7.7269 (pid 25800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.245942][T25800] Use struct sctp_sack_info instead [ 623.340882][T25801] xt_CT: No such helper "netbios-ns" [ 624.152423][T25818] syzkaller0: entered promiscuous mode [ 624.158054][T25818] syzkaller0: entered allmulticast mode [ 625.767088][T25854] loop7: detected capacity change from 0 to 32768 [ 625.833881][T19422] loop7: p1 p3 < p5 p6 > [ 625.848878][T19422] loop7: p5 start 117448704 is beyond EOD, truncated [ 625.861627][T25854] loop7: p1 p3 < p5 p6 > [ 625.867308][T25854] loop7: p5 start 117448704 is beyond EOD, truncated [ 626.050313][T25861] tipc: Enabling of bearer rejected, already enabled [ 627.729250][T25898] loop6: detected capacity change from 0 to 32768 [ 627.815556][T25896] xt_CT: No such helper "netbios-ns" [ 627.884146][T19422] loop6: p1 p3 < p5 p6 > [ 627.890366][T19422] loop6: p5 start 117448704 is beyond EOD, truncated [ 628.239483][T25898] loop6: p1 p3 < p5 p6 > [ 628.246410][T25898] loop6: p5 start 117448704 is beyond EOD, truncated [ 628.273696][T25906] hub 2-0:1.0: USB hub found [ 628.278554][T25906] hub 2-0:1.0: 8 ports detected [ 629.506884][T25931] hub 2-0:1.0: USB hub found [ 629.511673][T25931] hub 2-0:1.0: 8 ports detected [ 629.634757][T25938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7321'. [ 630.011814][T25957] syzkaller0: entered promiscuous mode [ 630.017513][T25957] syzkaller0: entered allmulticast mode [ 630.351674][T25966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7333'. [ 631.281518][T25987] syzkaller0: entered promiscuous mode [ 631.287815][T25987] syzkaller0: entered allmulticast mode [ 631.693172][T25996] hub 2-0:1.0: USB hub found [ 631.697928][T25996] hub 2-0:1.0: 8 ports detected [ 632.236007][T26008] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7348'. [ 633.795567][T26034] hub 2-0:1.0: USB hub found [ 633.800456][T26034] hub 2-0:1.0: 8 ports detected [ 634.072362][T26046] hub 2-0:1.0: USB hub found [ 634.077247][T26046] hub 2-0:1.0: 8 ports detected [ 636.182944][T26087] loop7: detected capacity change from 0 to 1024 [ 636.285061][T26087] EXT4-fs: Ignoring removed nobh option [ 636.290690][T26087] EXT4-fs: Ignoring removed bh option [ 636.431029][T26087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.544005][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.560022][T26100] hub 2-0:1.0: USB hub found [ 636.565075][T26100] hub 2-0:1.0: 8 ports detected [ 637.021405][T26106] sctp: [Deprecated]: syz.4.7382 (pid 26106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.021405][T26106] Use struct sctp_sack_info instead [ 637.560363][T26107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7383'. [ 638.840558][T26140] loop6: detected capacity change from 0 to 256 [ 638.858187][T26140] netlink: 240 bytes leftover after parsing attributes in process `syz.6.7395'. [ 639.565547][T26149] hub 2-0:1.0: USB hub found [ 639.570925][T26149] hub 2-0:1.0: 8 ports detected [ 639.822633][T26156] sctp: [Deprecated]: syz.6.7399 (pid 26156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.822633][T26156] Use struct sctp_sack_info instead [ 639.844988][T26156] loop6: detected capacity change from 0 to 512 [ 639.853147][T26156] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 639.916332][T26156] EXT4-fs (loop6): orphan cleanup on readonly fs [ 639.923012][T26156] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.7399: bad orphan inode 15 [ 639.968517][T26156] ext4_test_bit(bit=14, block=18) = 1 [ 639.973977][T26156] is_bad_inode(inode)=0 [ 639.978153][T26156] NEXT_ORPHAN(inode)=1023 [ 639.982528][T26156] max_ino=32 [ 639.985812][T26156] i_nlink=0 [ 640.080263][T26156] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7399: bg 0: block 161: padding at end of block bitmap is not set [ 640.095097][T26156] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 640.105315][T26156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 640.269551][T26172] loop7: detected capacity change from 0 to 1024 [ 640.285688][T26172] EXT4-fs: Ignoring removed nobh option [ 640.291370][T26172] EXT4-fs: Ignoring removed bh option [ 640.326026][T26175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7405'. [ 640.344224][T26172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.371486][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.551240][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.784946][T26209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7416'. [ 641.983975][T26227] loop6: detected capacity change from 0 to 512 [ 642.012900][T26227] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.7424: invalid fast symlink length 39 [ 642.025369][T26227] EXT4-fs (loop6): get root inode failed [ 642.031055][T26227] EXT4-fs (loop6): mount failed [ 642.145611][T26232] sctp: [Deprecated]: syz.7.7421 (pid 26232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.145611][T26232] Use struct sctp_sack_info instead [ 642.165353][T26232] loop7: detected capacity change from 0 to 512 [ 642.670898][T26232] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 642.687466][T26232] EXT4-fs (loop7): orphan cleanup on readonly fs [ 642.697732][T26232] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.7421: bad orphan inode 15 [ 642.708384][T26232] ext4_test_bit(bit=14, block=18) = 1 [ 642.713823][T26232] is_bad_inode(inode)=0 [ 642.717983][T26232] NEXT_ORPHAN(inode)=1023 [ 642.722365][T26232] max_ino=32 [ 642.725564][T26232] i_nlink=0 [ 642.729252][T26232] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7421: bg 0: block 161: padding at end of block bitmap is not set [ 642.744314][T26232] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 642.757099][T26232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 642.959695][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7428'. [ 643.032474][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.129533][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7426'. [ 643.289778][ T29] audit: type=1400 audit(1764200351.564:83452): avc: denied { execute_no_trans } for pid=26230 comm="syz.2.7425" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 643.943072][T26252] hub 2-0:1.0: USB hub found [ 643.947915][T26252] hub 2-0:1.0: 8 ports detected [ 644.792239][T26282] sctp: [Deprecated]: syz.7.7439 (pid 26282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.792239][T26282] Use struct sctp_sack_info instead [ 644.815509][T26282] loop7: detected capacity change from 0 to 512 [ 644.844805][T26282] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 644.889823][T26282] EXT4-fs (loop7): orphan cleanup on readonly fs [ 644.896637][T26282] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.7439: bad orphan inode 15 [ 644.908809][T26282] ext4_test_bit(bit=14, block=18) = 1 [ 644.914241][T26282] is_bad_inode(inode)=0 [ 644.918417][T26282] NEXT_ORPHAN(inode)=1023 [ 644.922771][T26282] max_ino=32 [ 644.926065][T26282] i_nlink=0 [ 644.930437][T26282] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7439: bg 0: block 161: padding at end of block bitmap is not set [ 644.946149][T26282] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 644.958665][T26282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 645.283270][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.097827][T26305] hub 2-0:1.0: USB hub found [ 646.102643][T26305] hub 2-0:1.0: 8 ports detected [ 646.854580][T26335] sctp: [Deprecated]: syz.6.7456 (pid 26335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.854580][T26335] Use struct sctp_sack_info instead [ 646.875504][T26335] loop6: detected capacity change from 0 to 512 [ 646.889980][T26335] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 647.354216][T26335] EXT4-fs (loop6): orphan cleanup on readonly fs [ 647.360769][T26335] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.7456: bad orphan inode 15 [ 647.371833][T26335] ext4_test_bit(bit=14, block=18) = 1 [ 647.377241][T26335] is_bad_inode(inode)=0 [ 647.381486][T26335] NEXT_ORPHAN(inode)=1023 [ 647.385884][T26335] max_ino=32 [ 647.389094][T26335] i_nlink=0 [ 647.392884][T26335] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7456: bg 0: block 161: padding at end of block bitmap is not set [ 647.407634][T26335] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 647.417271][T26335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 647.610096][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.123199][T26359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.131930][T26359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.477941][T26354] hub 2-0:1.0: USB hub found [ 648.559076][T26354] hub 2-0:1.0: 8 ports detected [ 648.741579][T26382] capability: warning: `syz.2.7471' uses 32-bit capabilities (legacy support in use) [ 650.571576][T26417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.580338][T26417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.941112][T26472] netlink: 'syz.1.7505': attribute type 10 has an invalid length. [ 654.115681][T26526] sctp: [Deprecated]: syz.1.7520 (pid 26526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.115681][T26526] Use struct sctp_sack_info instead [ 654.491187][T26538] sctp: [Deprecated]: syz.4.7524 (pid 26538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.491187][T26538] Use struct sctp_sack_info instead [ 654.990969][T26546] loop6: detected capacity change from 0 to 2048 [ 655.037715][T26559] sctp: [Deprecated]: syz.1.7533 (pid 26559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.037715][T26559] Use struct sctp_sack_info instead [ 655.077023][T19422] GPT:first_usable_lbas don't match. [ 655.083106][T19422] GPT:34 != 290 [ 655.086604][T19422] GPT: Use GNU Parted to correct GPT errors. [ 655.092908][T19422] loop6: p1 p2 p3 [ 655.182417][T26546] GPT:first_usable_lbas don't match. [ 655.187817][T26546] GPT:34 != 290 [ 655.191289][T26546] GPT: Use GNU Parted to correct GPT errors. [ 655.197622][T26546] loop6: p1 p2 p3 [ 656.815609][T26613] hub 2-0:1.0: USB hub found [ 656.820745][T26613] hub 2-0:1.0: 8 ports detected [ 658.037862][T26630] hub 2-0:1.0: USB hub found [ 658.042634][T26630] hub 2-0:1.0: 8 ports detected [ 658.770387][T26664] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 659.439579][T26671] loop7: detected capacity change from 0 to 4096 [ 659.754806][T26678] hub 2-0:1.0: USB hub found [ 659.759576][T26678] hub 2-0:1.0: 8 ports detected [ 660.573924][T26671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.665110][ T29] audit: type=1400 audit(1764200368.915:83453): avc: denied { setattr } for pid=26669 comm="syz.7.7576" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 660.693664][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.768181][T26697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.778515][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.062110][T26707] tipc: Enabled bearer , priority 0 [ 661.070203][T26707] syzkaller0: entered promiscuous mode [ 661.075792][T26707] syzkaller0: entered allmulticast mode [ 661.092564][T26707] tipc: Resetting bearer [ 661.109437][T26706] tipc: Resetting bearer [ 661.119601][T26706] tipc: Disabling bearer [ 661.327499][T26733] loop7: detected capacity change from 0 to 256 [ 661.552517][ T29] audit: type=1400 audit(1764200369.835:83454): avc: denied { create } for pid=26741 comm="syz.1.7604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 661.576456][ T29] audit: type=1400 audit(1764200369.855:83455): avc: denied { sys_admin } for pid=26741 comm="syz.1.7604" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 662.571155][T26778] loop7: detected capacity change from 0 to 1024 [ 662.593199][T26778] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 662.637706][T26778] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 662.661180][T26778] EXT4-fs (loop7): orphan cleanup on readonly fs [ 662.671152][T26778] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.7615: Freeing blocks not in datazone - block = 0, count = 4096 [ 662.752524][T26778] EXT4-fs (loop7): 1 orphan inode deleted [ 662.760458][T26778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 663.001812][T19006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.481351][T26820] sctp: [Deprecated]: syz.1.7629 (pid 26820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.481351][T26820] Use struct sctp_sack_info instead [ 663.956948][T26861] sctp: [Deprecated]: syz.4.7646 (pid 26861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.956948][T26861] Use struct sctp_sack_info instead [ 664.089948][T26867] syzkaller0: entered promiscuous mode [ 664.096241][T26867] syzkaller0: entered allmulticast mode [ 664.310561][T26886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.320496][T26886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.889301][T26902] syzkaller0: entered promiscuous mode [ 664.894887][T26902] syzkaller0: entered allmulticast mode [ 665.303288][T26936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7673'. [ 665.343540][T26942] loop7: detected capacity change from 0 to 128 [ 665.367432][T26942] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.481574][ T29] audit: type=1400 audit(1764200373.765:83456): avc: denied { associate } for pid=26951 comm="syz.2.7680" name="cpuset.effective_mems" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 665.512213][T26942] ext4 filesystem being mounted at /588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 666.267105][T26976] loop6: detected capacity change from 0 to 512 [ 666.526203][T26976] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 666.552316][T26976] EXT4-fs (loop6): orphan cleanup on readonly fs [ 666.558922][T26976] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.7684: bad orphan inode 15 [ 666.571327][T26976] ext4_test_bit(bit=14, block=18) = 1 [ 666.576787][T26976] is_bad_inode(inode)=0 [ 666.581680][T26976] NEXT_ORPHAN(inode)=1023 [ 666.586137][T26976] max_ino=32 [ 666.589404][T26976] i_nlink=0 [ 666.593382][T26976] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7684: bg 0: block 161: padding at end of block bitmap is not set [ 666.608474][T26976] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 666.618751][T26976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 666.719586][T19006] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.804161][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.848869][T26999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7695'. [ 667.852193][T27047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.862670][T27047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.912839][T27051] syzkaller0: entered promiscuous mode [ 667.918538][T27051] syzkaller0: entered allmulticast mode [ 668.128308][T27056] hub 2-0:1.0: USB hub found [ 668.133258][T27056] hub 2-0:1.0: 8 ports detected [ 668.637280][T27074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.647468][T27074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.844108][T27084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.857682][T27084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.255547][T27094] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7729'. [ 669.709905][T13630] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.754233][ T29] audit: type=1400 audit(1764200378.005:83457): avc: denied { write } for pid=27102 comm="syz.1.7732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 669.885334][T13630] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.973317][T13630] bond0: (slave netdevsim1): Releasing backup interface [ 669.987427][T13630] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.042789][T27126] syzkaller0: entered promiscuous mode [ 670.048334][T27126] syzkaller0: entered allmulticast mode [ 670.085457][T13630] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.190994][T13630] bridge_slave_1: left allmulticast mode [ 670.196780][T13630] bridge_slave_1: left promiscuous mode [ 670.202616][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.225662][T13630] bridge_slave_0: left allmulticast mode [ 670.231580][T13630] bridge_slave_0: left promiscuous mode [ 670.237263][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.402990][T13630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.413488][T13630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.424009][T13630] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 670.435538][T13630] bond0 (unregistering): Released all slaves [ 670.446637][T27109] chnl_net:caif_netlink_parms(): no params data found [ 670.512969][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.521840][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.530386][T13630] tipc: Disabling bearer [ 670.535804][T13630] tipc: Left network mode [ 670.563723][T13630] hsr_slave_0: left promiscuous mode [ 670.569680][T13630] hsr_slave_1: left promiscuous mode [ 670.579984][T13630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.587653][T13630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.616217][T13630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.616567][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7743'. [ 670.623696][T13630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.647325][T13630] veth1_macvtap: left promiscuous mode [ 670.663240][T13630] veth0_macvtap: left promiscuous mode [ 670.668880][T13630] veth1_vlan: left promiscuous mode [ 670.676019][T13630] veth0_vlan: left promiscuous mode [ 670.781321][T13630] team0 (unregistering): Port device team_slave_1 removed [ 670.791506][T13630] team0 (unregistering): Port device team_slave_0 removed [ 670.843628][T27109] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.850909][T27109] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.860125][T27109] bridge_slave_0: entered allmulticast mode [ 670.867111][T27109] bridge_slave_0: entered promiscuous mode [ 670.874982][T27109] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.882226][T27109] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.890081][T27109] bridge_slave_1: entered allmulticast mode [ 670.896727][T27109] bridge_slave_1: entered promiscuous mode [ 670.947381][T27168] syzkaller0: entered promiscuous mode [ 670.953127][T27168] syzkaller0: entered allmulticast mode [ 670.963223][T27109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.998710][T27109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.038896][T27109] team0: Port device team_slave_0 added [ 671.045856][T27109] team0: Port device team_slave_1 added [ 671.053520][T27176] loop6: detected capacity change from 0 to 512 [ 671.085837][T27109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.092945][T27109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.119660][T27109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.141471][T27176] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.7749: invalid fast symlink length 39 [ 671.166524][T27176] EXT4-fs (loop6): get root inode failed [ 671.172272][T27176] EXT4-fs (loop6): mount failed [ 671.181373][T13630] IPVS: stop unused estimator thread 0... [ 671.188089][T27109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.195114][T27109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.221097][T27109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.320177][T27109] hsr_slave_0: entered promiscuous mode [ 671.419279][T27109] hsr_slave_1: entered promiscuous mode [ 671.432750][T27109] debugfs: 'hsr0' already exists in 'hsr' [ 671.438541][T27109] Cannot create hsr debugfs directory [ 672.318098][T27109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 672.388357][T27109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 672.438246][T27109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 672.447415][T27109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 672.535392][T27109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.564675][T27109] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.574950][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.582179][T13632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.625125][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.632262][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.711105][T27109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.996847][T27109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.076266][T27304] loop6: detected capacity change from 0 to 1024 [ 673.135347][T27304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 673.181186][T27304] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.204163][T27304] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.7770: lblock 3 mapped to illegal pblock 3 (length 3) [ 673.271517][T27304] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 673.283931][T27304] EXT4-fs (loop6): This should not happen!! Data will be lost [ 673.283931][T27304] [ 673.367043][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 673.550574][T27109] veth0_vlan: entered promiscuous mode [ 673.563739][T27109] veth1_vlan: entered promiscuous mode [ 673.621669][T27109] veth0_macvtap: entered promiscuous mode [ 673.692675][T27109] veth1_macvtap: entered promiscuous mode [ 673.935441][T27109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.960757][T27353] hub 2-0:1.0: USB hub found [ 673.966000][T27353] hub 2-0:1.0: 8 ports detected [ 674.016045][T27109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.092487][T13632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.149173][T13632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.205961][T13632] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.300056][T13632] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.507655][T27369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 674.731729][T27375] syzkaller0: entered promiscuous mode [ 674.737555][T27375] syzkaller0: entered allmulticast mode [ 674.918848][T27377] loop6: detected capacity change from 0 to 1024 [ 674.930686][T27377] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 674.949415][T27377] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 674.959303][T27377] EXT4-fs (loop6): orphan cleanup on readonly fs [ 674.966038][T27377] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.7786: Freeing blocks not in datazone - block = 0, count = 4096 [ 674.980173][T27377] EXT4-fs (loop6): 1 orphan inode deleted [ 674.986522][T27377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 675.012644][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.298790][T27394] tipc: Started in network mode [ 675.303854][T27394] tipc: Node identity 1a1fdb732596, cluster identity 4711 [ 675.311954][T27394] tipc: Enabled bearer , priority 0 [ 675.423336][T27397] syzkaller0: entered promiscuous mode [ 675.428875][T27397] syzkaller0: entered allmulticast mode [ 675.523977][T27394] tipc: Resetting bearer [ 675.543908][T27393] tipc: Resetting bearer [ 675.581818][T27393] tipc: Disabling bearer [ 675.708467][T27418] loop7: detected capacity change from 0 to 256 [ 675.747741][T27419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7804'. [ 675.927524][T27420] block device autoloading is deprecated and will be removed. [ 676.017195][T27418] FAT-fs (loop7): codepage cp862 not found [ 676.599445][T27455] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7819'. [ 677.097618][T27467] loop7: detected capacity change from 0 to 4096 [ 677.133727][T27467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.213699][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.703461][T27524] syzkaller0: entered promiscuous mode [ 678.709017][T27524] syzkaller0: entered allmulticast mode [ 679.679823][ T29] audit: type=1400 audit(1764200387.956:83458): avc: denied { unmount } for pid=23940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 679.756786][T27552] tipc: Started in network mode [ 679.761794][T27552] tipc: Node identity 7ed5a428e04c, cluster identity 4711 [ 679.768977][T27552] tipc: Enabled bearer , priority 0 [ 679.776666][T27552] syzkaller0: entered promiscuous mode [ 679.782918][T27552] syzkaller0: entered allmulticast mode [ 679.802516][T27549] tipc: Resetting bearer [ 679.812044][T27549] tipc: Disabling bearer [ 680.566432][T27572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.793585][T27572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.612666][T27586] tipc: Enabled bearer , priority 0 [ 681.630134][T27586] syzkaller0: entered promiscuous mode [ 681.635748][T27586] syzkaller0: entered allmulticast mode [ 681.659264][T27585] tipc: Resetting bearer [ 681.682747][T27585] tipc: Disabling bearer [ 681.822048][T27595] loop6: detected capacity change from 0 to 4096 [ 682.189086][T27600] hub 2-0:1.0: USB hub found [ 682.193927][T27600] hub 2-0:1.0: 8 ports detected [ 682.365072][T27595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.634479][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.037989][T27622] tipc: Enabled bearer , priority 0 [ 683.062116][T27622] syzkaller0: entered promiscuous mode [ 683.067646][T27622] syzkaller0: entered allmulticast mode [ 683.109100][T27621] tipc: Resetting bearer [ 683.119090][T27621] tipc: Disabling bearer [ 684.344041][T27647] Set syz1 is full, maxelem 6117 reached [ 684.397664][T27654] loop7: detected capacity change from 0 to 4096 [ 684.590775][T27654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.619874][ T29] audit: type=1400 audit(1764200392.736:83459): avc: denied { bind } for pid=27657 comm="syz.2.7891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 684.808901][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.959173][T27692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.999909][T27692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.135467][T27707] loop6: detected capacity change from 0 to 1024 [ 686.148038][T27707] EXT4-fs: Ignoring removed orlov option [ 686.164120][T27707] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 686.187141][T27707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.221990][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.660768][T27721] loop6: detected capacity change from 0 to 1024 [ 686.691018][T27721] EXT4-fs: Ignoring removed nobh option [ 686.801563][T27721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.839696][ T29] audit: type=1400 audit(1764200395.116:83460): avc: denied { write } for pid=27718 comm="syz.7.7910" path="socket:[95143]" dev="sockfs" ino=95143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 687.129894][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.836333][T27749] netlink: 'syz.2.7920': attribute type 12 has an invalid length. [ 688.000317][T27749] netlink: 'syz.2.7920': attribute type 12 has an invalid length. [ 688.542892][T27766] 9pnet_fd: Insufficient options for proto=fd [ 688.910566][T27773] syzkaller0: entered promiscuous mode [ 688.916317][T27773] syzkaller0: entered allmulticast mode [ 688.971060][T27779] netlink: 'syz.1.7929': attribute type 10 has an invalid length. [ 688.998167][T27779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.006163][T27779] team0: Port device bond0 added [ 689.478241][T27778] hub 2-0:1.0: USB hub found [ 689.536323][T27778] hub 2-0:1.0: 8 ports detected [ 689.754412][T27799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7937'. [ 689.781492][T27801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.790311][T27801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.041376][T27809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.074452][T27809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.157535][T27811] syzkaller0: entered promiscuous mode [ 690.163773][T27811] syzkaller0: entered allmulticast mode [ 690.830232][T27838] syzkaller0: entered promiscuous mode [ 690.835792][T27838] syzkaller0: entered allmulticast mode [ 691.702167][T27867] loop7: detected capacity change from 0 to 128 [ 691.844872][ T29] audit: type=1326 audit(1764200400.126:83461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27871 comm="syz.6.7968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x0 [ 692.094095][T27875] hub 2-0:1.0: USB hub found [ 692.099401][T27875] hub 2-0:1.0: 8 ports detected [ 692.904990][T27895] hub 2-0:1.0: USB hub found [ 692.909781][T27895] hub 2-0:1.0: 8 ports detected [ 693.736383][T27914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7982'. [ 693.747182][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7979'. [ 693.766608][T27914] vlan2: entered promiscuous mode [ 693.771824][T27914] batadv0: entered promiscuous mode [ 694.607688][T27921] hub 2-0:1.0: USB hub found [ 694.612525][T27921] hub 2-0:1.0: 8 ports detected [ 694.696364][T27919] syzkaller0: entered promiscuous mode [ 694.701945][T27919] syzkaller0: entered allmulticast mode [ 695.135787][T27939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7990'. [ 695.516117][T27951] hub 2-0:1.0: USB hub found [ 695.520941][T27951] hub 2-0:1.0: 8 ports detected [ 696.596827][T27974] tipc: Started in network mode [ 696.601908][T27974] tipc: Node identity ee488e93748, cluster identity 4711 [ 696.609165][T27974] tipc: Enabled bearer , priority 0 [ 696.617828][T27974] tipc: Resetting bearer [ 696.640707][T27973] tipc: Disabling bearer [ 698.161357][T28019] tipc: Enabled bearer , priority 0 [ 698.168078][T28012] xt_CT: No such helper "netbios-ns" [ 698.415453][T28019] tipc: Resetting bearer [ 698.444673][T28018] tipc: Disabling bearer [ 698.532324][T28030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8028'. [ 698.990536][T28054] syzkaller0: entered promiscuous mode [ 698.996061][T28054] syzkaller0: entered allmulticast mode [ 700.357258][T28080] syzkaller0: entered promiscuous mode [ 700.363719][T28080] syzkaller0: entered allmulticast mode [ 700.739836][ T29] audit: type=1400 audit(1764200409.027:83462): avc: denied { map } for pid=28096 comm="syz.2.8055" path="socket:[96080]" dev="sockfs" ino=96080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 700.807650][T28101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.816544][T28101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.866999][ T29] audit: type=1400 audit(1764200409.147:83463): avc: denied { read } for pid=28104 comm="syz.2.8059" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 702.314806][T28144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.373096][T28144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.413564][T28148] hub 2-0:1.0: USB hub found [ 702.418395][T28148] hub 2-0:1.0: 8 ports detected [ 703.224266][T28161] loop6: detected capacity change from 0 to 1024 [ 703.241531][T28161] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 703.259567][T28161] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 703.268390][T28161] EXT4-fs (loop6): orphan cleanup on readonly fs [ 703.274940][ T29] audit: type=1400 audit(1764200411.557:83464): avc: denied { read } for pid=28165 comm="syz.7.8081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 703.299119][T28161] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.8080: Freeing blocks not in datazone - block = 0, count = 4096 [ 703.313245][T28161] EXT4-fs (loop6): 1 orphan inode deleted [ 703.331092][T28161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 703.356813][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.687117][T28183] syzkaller0: entered promiscuous mode [ 703.692781][T28183] syzkaller0: entered allmulticast mode [ 706.874513][T28262] syzkaller0: entered promiscuous mode [ 706.880976][T28262] syzkaller0: entered allmulticast mode [ 707.025204][T28280] hub 2-0:1.0: USB hub found [ 707.030257][T28280] hub 2-0:1.0: 8 ports detected [ 707.998667][T28277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8124'. [ 708.069574][T28293] loop7: detected capacity change from 0 to 1024 [ 708.104123][T28293] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 708.145507][T28297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.207088][T28297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.226206][T28298] loop6: detected capacity change from 0 to 1024 [ 708.277916][T28293] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 708.315233][T28298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.352285][T28293] EXT4-fs (loop7): orphan cleanup on readonly fs [ 708.379077][T28293] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.8127: Freeing blocks not in datazone - block = 0, count = 4096 [ 708.401206][T28298] EXT4-fs error (device loop6): ext4_xattr_set_entry:1665: inode #15: comm syz.6.8130: corrupted xattr entries [ 708.413450][T28293] EXT4-fs (loop7): 1 orphan inode deleted [ 708.419264][T28298] EXT4-fs error (device loop6): ext4_xattr_block_set:2215: inode #15: comm syz.6.8130: bad block 113 [ 708.430774][T28293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 708.466844][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.479535][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.834282][T28320] hub 2-0:1.0: USB hub found [ 708.839209][T28320] hub 2-0:1.0: 8 ports detected [ 709.007493][T28318] syzkaller0: entered promiscuous mode [ 709.013766][T28318] syzkaller0: entered allmulticast mode [ 709.207626][T28340] lo speed is unknown, defaulting to 1000 [ 709.214239][T28340] lo speed is unknown, defaulting to 1000 [ 709.220376][T28340] lo speed is unknown, defaulting to 1000 [ 709.227159][T28340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 709.243385][T28340] lo speed is unknown, defaulting to 1000 [ 709.255088][T28340] lo speed is unknown, defaulting to 1000 [ 709.261383][T28340] lo speed is unknown, defaulting to 1000 [ 709.273998][T28340] lo speed is unknown, defaulting to 1000 [ 709.280752][T28340] lo speed is unknown, defaulting to 1000 [ 709.287312][T28340] lo speed is unknown, defaulting to 1000 [ 709.293935][T28340] lo speed is unknown, defaulting to 1000 [ 709.333334][T28347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8148'. [ 710.276836][T28369] syzkaller0: entered promiscuous mode [ 710.283168][T28369] syzkaller0: entered allmulticast mode [ 710.340572][T28376] siw: device registration error -23 [ 711.305501][ T29] audit: type=1400 audit(1764200419.217:83465): avc: denied { getopt } for pid=28377 comm="syz.2.8160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 711.326532][T28387] hub 2-0:1.0: USB hub found [ 711.331423][T28387] hub 2-0:1.0: 8 ports detected [ 711.478668][T28396] pimreg: entered allmulticast mode [ 711.493513][T28396] pimreg: left allmulticast mode [ 711.882621][T28411] syzkaller0: entered promiscuous mode [ 711.888329][T28411] syzkaller0: entered allmulticast mode [ 712.558667][T28431] loop7: detected capacity change from 0 to 512 [ 712.674562][T28431] EXT4-fs: Ignoring removed i_version option [ 712.680741][T28431] EXT4-fs: Ignoring removed bh option [ 712.830673][T28431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.843734][T28431] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 712.846641][ T29] audit: type=1400 audit(1764200421.128:83466): avc: denied { ioctl } for pid=28439 comm="syz.4.8182" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 713.019267][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.292079][ T29] audit: type=1400 audit(1764200421.558:83467): avc: denied { write } for pid=28449 comm="syz.6.8186" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 713.339756][T28455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.349275][T28455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.502086][T28457] siw: device registration error -23 [ 713.757133][T28462] xt_CT: No such helper "netbios-ns" [ 713.890539][T28465] netlink: 280 bytes leftover after parsing attributes in process `syz.6.8190'. [ 714.933333][T28498] netlink: 268 bytes leftover after parsing attributes in process `syz.4.8204'. [ 715.297909][T28511] loop7: detected capacity change from 0 to 1024 [ 715.306143][T28511] EXT4-fs: dax option not supported [ 716.774758][T28541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.855599][T28545] qrtr: Invalid version 0 [ 716.870362][ T29] audit: type=1400 audit(1764200425.128:83468): avc: denied { connect } for pid=28538 comm="syz.1.8219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 716.921787][T28541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.361300][T28597] netlink: 268 bytes leftover after parsing attributes in process `syz.4.8240'. [ 720.332137][T28617] syzkaller0: entered promiscuous mode [ 720.337804][T28617] syzkaller0: entered allmulticast mode [ 720.824811][T28630] netlink: 268 bytes leftover after parsing attributes in process `syz.1.8252'. [ 720.910491][T13630] dvmrp6 (unregistering): left allmulticast mode [ 720.951703][T13630] bond0 (unregistering): Released all slaves [ 720.980156][T13630] bond1 (unregistering): Released all slaves [ 721.112863][T13630] hsr_slave_0: left promiscuous mode [ 721.120351][T13630] hsr_slave_1: left promiscuous mode [ 721.133103][T13630] batman_adv: batadv0: Removing interface: veth1_vlan [ 721.146235][T13630] team0 (unregistering): Port device vlan2 removed [ 721.755017][T28657] syzkaller0: entered promiscuous mode [ 721.760773][T28657] syzkaller0: entered allmulticast mode [ 721.951430][T28681] netlink: 268 bytes leftover after parsing attributes in process `syz.1.8268'. [ 722.213104][T28692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8276'. [ 722.743052][T13630] IPVS: stop unused estimator thread 0... [ 723.374636][T28711] syzkaller0: entered promiscuous mode [ 723.380317][T28711] syzkaller0: entered allmulticast mode [ 723.701066][T28730] tipc: Enabled bearer , priority 0 [ 723.722784][T28730] tipc: Resetting bearer [ 723.730431][T28729] tipc: Disabling bearer [ 724.157187][T28734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.165877][T28734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.127531][T28756] netlink: 'syz.6.8300': attribute type 12 has an invalid length. [ 725.268074][T28760] netlink: 'syz.6.8300': attribute type 12 has an invalid length. [ 725.533326][T28763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8301'. [ 725.792363][T28783] tipc: Enabled bearer , priority 0 [ 725.801072][T28783] tipc: Resetting bearer [ 725.808682][T28782] tipc: Disabling bearer [ 726.129174][T28797] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8315'. [ 727.324149][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8328'. [ 727.336178][T28830] geneve2: entered promiscuous mode [ 727.341682][T28830] geneve2: entered allmulticast mode [ 727.350181][T13626] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 45174 - 0 [ 727.376892][T13626] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 45174 - 0 [ 727.394130][T13626] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 45174 - 0 [ 727.403112][T13626] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 45174 - 0 [ 728.657056][T28883] netlink: 'syz.1.8349': attribute type 12 has an invalid length. [ 728.761238][T28883] netlink: 'syz.1.8349': attribute type 12 has an invalid length. [ 729.649024][T28905] loop7: detected capacity change from 0 to 512 [ 729.655802][T28905] EXT4-fs: Ignoring removed bh option [ 729.671150][T28905] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 729.692662][T28905] EXT4-fs (loop7): 1 truncate cleaned up [ 729.698950][T28905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.723357][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.063435][T28918] loop6: detected capacity change from 0 to 1024 [ 730.127917][T28918] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 730.219330][T28918] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 730.242402][T28918] EXT4-fs (loop6): orphan cleanup on readonly fs [ 730.250591][T28918] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.8363: Freeing blocks not in datazone - block = 0, count = 4096 [ 730.291907][T28918] EXT4-fs (loop6): 1 orphan inode deleted [ 730.300473][T28918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.329511][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.446417][T28925] lo speed is unknown, defaulting to 1000 [ 730.498992][T13633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.592262][T28950] loop9: detected capacity change from 0 to 7 [ 730.628703][T28950] buffer_io_error: 28872 callbacks suppressed [ 730.628722][T28950] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.642958][T28950] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.650922][T28950] loop9: unable to read partition table [ 730.656602][T28950] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 730.656602][T28950] ) failed (rc=-5) [ 730.660646][T19422] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.696300][T13633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.696543][T19422] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.716561][T19422] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.724865][T19422] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.733157][T19422] Buffer I/O error on dev loop9, logical block 0, async page read [ 730.820741][T13633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.844371][T28925] chnl_net:caif_netlink_parms(): no params data found [ 730.885969][T13633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.920491][T28925] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.928001][T28925] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.935395][T28925] bridge_slave_0: entered allmulticast mode [ 730.950274][T28925] bridge_slave_0: entered promiscuous mode [ 730.957462][T28925] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.964645][T28925] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.972168][T28925] bridge_slave_1: entered allmulticast mode [ 730.978778][T28925] bridge_slave_1: entered promiscuous mode [ 731.007636][T28925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.023075][T28925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.066387][T28925] team0: Port device team_slave_0 added [ 731.076828][T28925] team0: Port device team_slave_1 added [ 731.115660][T28925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.122901][T28925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.149122][T28925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.161236][T28925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.168248][T28925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.194512][T28925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.391023][T28925] hsr_slave_0: entered promiscuous mode [ 731.402030][T28925] hsr_slave_1: entered promiscuous mode [ 731.408636][T28925] debugfs: 'hsr0' already exists in 'hsr' [ 731.414394][T28925] Cannot create hsr debugfs directory [ 731.421630][T13633] bridge_slave_1: left allmulticast mode [ 731.427490][T13633] bridge_slave_1: left promiscuous mode [ 731.433256][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.479800][T13633] bridge_slave_0: left allmulticast mode [ 731.485512][T13633] bridge_slave_0: left promiscuous mode [ 731.491375][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.647618][T13633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.660329][T13633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.670520][T13633] bond0 (unregistering): Released all slaves [ 731.755863][T13633] tipc: Left network mode [ 731.772943][T13633] hsr_slave_0: left promiscuous mode [ 731.783162][T13633] hsr_slave_1: left promiscuous mode [ 731.790862][T13633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.798364][T13633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.815524][T13633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.823097][T13633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.843035][T13633] veth1_macvtap: left promiscuous mode [ 731.848688][T13633] veth0_macvtap: left promiscuous mode [ 731.854311][T13633] veth1_vlan: left promiscuous mode [ 731.859977][T13633] veth0_vlan: left promiscuous mode [ 731.923728][T13633] pimreg (unregistering): left allmulticast mode [ 731.992700][T13633] team0 (unregistering): Port device team_slave_1 removed [ 732.006053][T13633] team0 (unregistering): Port device team_slave_0 removed [ 732.391730][T29075] hub 2-0:1.0: USB hub found [ 732.397146][T29075] hub 2-0:1.0: 8 ports detected [ 732.462372][T13633] IPVS: stop unused estimator thread 0... [ 732.585339][T28925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 732.617858][T28925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 732.653534][T28925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 732.693917][T28925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 732.805121][T28925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.832223][T28925] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.850168][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.857449][T13630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.886649][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.893955][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.071471][T28925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.170562][T29128] pim6reg1: entered promiscuous mode [ 733.175929][T29128] pim6reg1: entered allmulticast mode [ 733.191215][T28925] veth0_vlan: entered promiscuous mode [ 733.209569][T28925] veth1_vlan: entered promiscuous mode [ 733.230230][T29140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.240853][T29140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45174 - 0 [ 733.266738][T28925] veth0_macvtap: entered promiscuous mode [ 733.275742][T28925] veth1_macvtap: entered promiscuous mode [ 733.296732][T28925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.316504][T29140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.326957][T29140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45174 - 0 [ 733.339756][T29144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8412'. [ 733.340275][T28925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.362098][T29142] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.376643][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.389663][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.404931][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.419348][T29140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.429758][T29140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45174 - 0 [ 733.446851][T13598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.465991][T29142] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.505506][T29140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.516052][T29140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45174 - 0 [ 733.536244][T29142] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.661399][ T29] audit: type=1326 audit(1764200441.939:83469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.685634][ T29] audit: type=1326 audit(1764200441.939:83470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.709400][ T29] audit: type=1326 audit(1764200441.939:83471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.733209][ T29] audit: type=1326 audit(1764200441.939:83472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.757906][ T29] audit: type=1326 audit(1764200441.939:83473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.780159][T29162] hub 2-0:1.0: USB hub found [ 733.781655][ T29] audit: type=1326 audit(1764200441.939:83474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.786247][T29162] hub 2-0:1.0: 8 ports detected [ 733.809754][ T29] audit: type=1326 audit(1764200441.939:83475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.809785][ T29] audit: type=1326 audit(1764200441.939:83476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.809814][ T29] audit: type=1326 audit(1764200441.939:83477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.885373][ T29] audit: type=1326 audit(1764200441.939:83478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.1.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 733.912094][T29142] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.932466][T13600] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 45174 - 0 [ 733.941158][T13600] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 733.963260][T13600] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 45174 - 0 [ 733.971663][T13600] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 733.992719][T13626] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.025757][T13626] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 45174 - 0 [ 734.034230][T13626] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.043173][T13626] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 45174 - 0 [ 734.051736][T13626] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.091620][T13626] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.100910][T13626] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.119926][T13626] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.526782][T29247] loop6: detected capacity change from 0 to 1024 [ 735.551387][T29247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.710074][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.823396][T29258] pim6reg1: entered promiscuous mode [ 735.829462][T29258] pim6reg1: entered allmulticast mode [ 737.228403][T29336] xt_CT: No such helper "netbios-ns" [ 738.088155][T29376] qrtr: Invalid version 0 [ 738.617680][T29394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.704903][T29394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.750378][T29394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.790827][T29394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.865997][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.878698][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.900091][T13626] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.916191][T29408] pim6reg1: entered promiscuous mode [ 738.921636][T29408] pim6reg1: entered allmulticast mode [ 738.942558][T13626] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.415343][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 739.415358][ T29] audit: type=1326 audit(1764200447.689:83773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29419 comm="syz.6.8528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 739.481036][ T29] audit: type=1326 audit(1764200447.729:83774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29419 comm="syz.6.8528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 739.505024][ T29] audit: type=1326 audit(1764200447.729:83775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29419 comm="syz.6.8528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 739.528979][ T29] audit: type=1326 audit(1764200447.729:83776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29419 comm="syz.6.8528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 739.719737][ T29] audit: type=1326 audit(1764200447.949:83777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.7.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc432f749 code=0x7ffc0000 [ 739.743479][ T29] audit: type=1326 audit(1764200447.949:83778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.7.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc432f749 code=0x7ffc0000 [ 739.767244][ T29] audit: type=1326 audit(1764200447.959:83779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.7.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fddc432f749 code=0x7ffc0000 [ 739.791275][ T29] audit: type=1326 audit(1764200447.959:83780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.7.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc432f749 code=0x7ffc0000 [ 739.814959][ T29] audit: type=1326 audit(1764200447.959:83781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.7.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc432f749 code=0x7ffc0000 [ 739.906312][T29432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8532'. [ 739.931804][T29432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8532'. [ 740.179977][T29438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.255719][T29438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.320402][T29438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.380394][T29438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.444604][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.460417][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.485425][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.494218][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.705116][T29457] siw: device registration error -23 [ 741.070027][T29460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8543'. [ 741.094284][T29460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8543'. [ 741.241283][T29467] loop6: detected capacity change from 0 to 512 [ 741.257485][T29467] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.8546: error while reading EA inode 32 err=-116 [ 741.276866][T29467] EXT4-fs (loop6): Remounting filesystem read-only [ 741.297589][T29467] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 741.307854][T29467] EXT4-fs (loop6): 1 orphan inode deleted [ 741.314030][T29467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.437703][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.498312][T29481] loop6: detected capacity change from 0 to 1024 [ 741.513669][T29481] EXT4-fs: dax option not supported [ 741.519118][ T29] audit: type=1326 audit(1764200449.789:83782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29476 comm="syz.1.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 741.787242][T29489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 741.891904][T29494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8554'. [ 741.949205][T29496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8554'. [ 742.594933][T29516] loop6: detected capacity change from 0 to 512 [ 742.604430][T29516] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.8562: error while reading EA inode 32 err=-116 [ 742.617196][T29516] EXT4-fs (loop6): Remounting filesystem read-only [ 742.623823][T29516] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 742.634822][T29516] EXT4-fs (loop6): 1 orphan inode deleted [ 742.641153][T29516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.658062][T29514] siw: device registration error -23 [ 742.668053][T29518] loop7: detected capacity change from 0 to 1024 [ 742.677929][T29518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.706594][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.739556][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.435738][T29552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8576'. [ 744.548999][T29583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8587'. [ 744.860150][T29594] siw: device registration error -23 [ 745.035158][T29601] hub 2-0:1.0: USB hub found [ 745.039947][T29601] hub 2-0:1.0: 8 ports detected [ 746.648690][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 746.648706][ T29] audit: type=1326 audit(1764200454.919:83836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29649 comm="syz.4.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 746.678694][ T29] audit: type=1326 audit(1764200454.919:83837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29649 comm="syz.4.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 746.702537][ T29] audit: type=1326 audit(1764200454.929:83838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29649 comm="syz.4.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 746.727487][ T29] audit: type=1326 audit(1764200454.929:83839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29649 comm="syz.4.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 746.769122][T29664] loop7: detected capacity change from 0 to 1024 [ 746.776330][T29664] EXT4-fs: dax option not supported [ 747.610531][ T29] audit: type=1326 audit(1764200455.889:83840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 747.634239][ T29] audit: type=1326 audit(1764200455.889:83841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 747.658063][ T29] audit: type=1326 audit(1764200455.889:83842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 747.682145][ T29] audit: type=1326 audit(1764200455.889:83843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 747.705898][ T29] audit: type=1326 audit(1764200455.889:83844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 747.729710][ T29] audit: type=1326 audit(1764200455.889:83845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 748.128858][T29697] netlink: 'syz.6.8629': attribute type 12 has an invalid length. [ 748.205197][T29700] netlink: 'syz.6.8629': attribute type 12 has an invalid length. [ 748.717251][T29719] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 748.727265][T29719] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 748.878518][T29719] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 748.888505][T29719] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 748.948614][T29719] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 748.958661][T29719] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 749.088170][T29719] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 749.098146][T29719] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 749.175889][T13626] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 45174 - 0 [ 749.184312][T13626] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 749.234605][T13626] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 45174 - 0 [ 749.243056][T13626] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 749.297166][T13626] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 45174 - 0 [ 749.305473][T13626] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 749.313858][T13626] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 45174 - 0 [ 749.322237][T13626] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 750.011896][T29757] netlink: 'syz.1.8651': attribute type 12 has an invalid length. [ 750.078650][T29759] netlink: 'syz.1.8651': attribute type 12 has an invalid length. [ 750.098907][T29758] loop6: detected capacity change from 0 to 1024 [ 750.138429][T29758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.171358][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.234422][T29769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8654'. [ 750.277632][T29774] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 750.287548][T29774] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 750.338078][T29774] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 750.348105][T29774] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 750.368924][T29779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 750.399793][T29774] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 750.409976][T29774] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 750.448283][T29781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 750.468099][T29774] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45174 - 0 [ 750.478187][T29774] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 751.681789][T29795] syzkaller0: entered promiscuous mode [ 751.687438][T29795] syzkaller0: entered allmulticast mode [ 752.152287][T29804] hub 2-0:1.0: USB hub found [ 752.157161][T29804] hub 2-0:1.0: 8 ports detected [ 752.832589][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 752.832609][ T29] audit: type=1326 audit(1764200461.110:84011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 752.862618][ T29] audit: type=1326 audit(1764200461.110:84012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 752.886479][ T29] audit: type=1326 audit(1764200461.110:84013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 752.910212][ T29] audit: type=1326 audit(1764200461.110:84014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 752.934419][ T29] audit: type=1326 audit(1764200461.110:84015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 752.958140][ T29] audit: type=1326 audit(1764200461.110:84016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 752.981780][ T29] audit: type=1326 audit(1764200461.110:84017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 753.005520][ T29] audit: type=1326 audit(1764200461.110:84018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 753.029187][ T29] audit: type=1326 audit(1764200461.110:84019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 753.052887][ T29] audit: type=1326 audit(1764200461.110:84020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.1.8668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a33bf749 code=0x7ffc0000 [ 754.241712][T29839] siw: device registration error -23 [ 754.408258][T29845] hub 2-0:1.0: USB hub found [ 754.413285][T29845] hub 2-0:1.0: 8 ports detected [ 754.758795][T29849] loop6: detected capacity change from 0 to 1024 [ 754.788492][T29849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.815198][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.331171][T13630] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 45174 - 0 [ 755.339585][T13630] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 755.351414][T13630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 45174 - 0 [ 755.359900][T13630] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 755.397075][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 45174 - 0 [ 755.405603][ T37] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 755.429911][T13600] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 45174 - 0 [ 755.438349][T13600] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 755.508664][T29903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 756.040127][T29918] siw: device registration error -23 [ 757.107643][T29937] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.149265][T29937] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.199375][T29937] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.249338][T29937] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.304792][T29876] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.317635][T29876] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.334551][T29876] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.359716][T29876] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.455404][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8703'. [ 757.465445][T29944] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8703'. [ 757.500496][T29946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8704'. [ 758.262186][T29966] xt_CT: No such helper "netbios-ns" [ 758.535054][T29976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8715'. [ 758.677824][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 758.677843][ T29] audit: type=1326 audit(1764200466.960:84179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.709490][ T29] audit: type=1326 audit(1764200466.960:84180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.733141][ T29] audit: type=1326 audit(1764200466.960:84181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.756785][ T29] audit: type=1326 audit(1764200466.960:84182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.780421][ T29] audit: type=1326 audit(1764200466.960:84183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.804142][ T29] audit: type=1326 audit(1764200466.960:84184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.827957][ T29] audit: type=1326 audit(1764200466.960:84185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.851728][ T29] audit: type=1326 audit(1764200466.960:84186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.875393][ T29] audit: type=1326 audit(1764200466.960:84187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.896284][T29993] macvlan1: entered promiscuous mode [ 758.899026][ T29] audit: type=1326 audit(1764200466.960:84188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.4.8720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 758.906220][T29993] ipvlan0: entered promiscuous mode [ 758.930772][T29994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 758.963342][T29993] ipvlan0: left promiscuous mode [ 758.976493][T29995] x_tables: duplicate underflow at hook 2 [ 758.982334][T14749] IPVS: starting estimator thread 0... [ 759.000891][T29993] macvlan1: left promiscuous mode [ 759.095661][T29996] IPVS: using max 2400 ests per chain, 120000 per kthread [ 759.258211][T30036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 760.018466][T30050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8730'. [ 761.822407][T30079] pim6reg1: entered promiscuous mode [ 761.827854][T30079] pim6reg1: entered allmulticast mode [ 761.991857][T30084] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8743'. [ 762.806445][T30103] x_tables: duplicate underflow at hook 2 [ 763.184865][T30115] loop7: detected capacity change from 0 to 1024 [ 763.239285][T30115] EXT4-fs: dax option not supported [ 763.463909][T30122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8756'. [ 763.473353][T30121] x_tables: duplicate underflow at hook 2 [ 763.488095][T30122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.522179][T30122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.531284][T30122] bond1: (slave bond0): Enslaving as an active interface with an up link [ 763.553283][T30122] bond1 (unregistering): (slave bond0): Releasing backup interface [ 763.566557][T30122] bond1 (unregistering): Released all slaves [ 763.644554][T30132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8759'. [ 763.678007][T30132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.705568][T30132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.714377][T30132] bond1: (slave bond0): Enslaving as an active interface with an up link [ 763.726579][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 763.726598][ T29] audit: type=1326 audit(1764200472.010:84312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.756800][ T29] audit: type=1326 audit(1764200472.010:84313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.780473][ T29] audit: type=1326 audit(1764200472.010:84314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.804096][ T29] audit: type=1326 audit(1764200472.010:84315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.827887][ T29] audit: type=1326 audit(1764200472.010:84316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.852069][ T29] audit: type=1326 audit(1764200472.010:84317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.875736][ T29] audit: type=1326 audit(1764200472.010:84318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.899381][ T29] audit: type=1326 audit(1764200472.010:84319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.923873][ T29] audit: type=1326 audit(1764200472.010:84320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.947620][ T29] audit: type=1326 audit(1764200472.010:84321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26f5f749 code=0x7ffc0000 [ 763.947914][T30141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30141 comm=syz.4.8759 [ 764.005998][T30132] bond1 (unregistering): (slave bond0): Releasing backup interface [ 764.016290][T30132] bond1 (unregistering): Released all slaves [ 766.215771][T30197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 766.882440][T30214] loop7: detected capacity change from 0 to 512 [ 766.894420][T30214] EXT4-fs (loop7): orphan cleanup on readonly fs [ 766.906264][T30214] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8786: bad orphan inode 13 [ 766.916810][T30214] ext4_test_bit(bit=12, block=18) = 1 [ 766.922281][T30214] is_bad_inode(inode)=0 [ 766.926579][T30214] NEXT_ORPHAN(inode)=2130706432 [ 766.931572][T30214] max_ino=32 [ 766.934775][T30214] i_nlink=1 [ 766.940106][T30214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 766.955940][T30214] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 766.986136][T30214] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 767.051764][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.642897][T30225] siw: device registration error -23 [ 767.968925][T30230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8791'. [ 767.984495][T30230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.003907][T30230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.012777][T30230] bond1: (slave bond0): Enslaving as an active interface with an up link [ 768.030298][T30230] bond1 (unregistering): (slave bond0): Releasing backup interface [ 768.040060][T30230] bond1 (unregistering): Released all slaves [ 768.126142][T30233] x_tables: duplicate underflow at hook 2 [ 768.640166][T30250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8799'. [ 768.662133][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8800'. [ 768.671833][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8800'. [ 768.690271][T30250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.715808][T30250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.724592][T30250] bond1: (slave bond0): Enslaving as an active interface with an up link [ 768.742061][T30250] bond1 (unregistering): (slave bond0): Releasing backup interface [ 768.894096][T30250] bond1 (unregistering): Released all slaves [ 769.076247][T30263] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8803'. [ 769.121792][T30263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.249510][T30265] bond1 (unregistering): Released all slaves [ 769.440149][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 769.440167][ T29] audit: type=1326 audit(1764200477.721:84608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 769.470783][ T29] audit: type=1326 audit(1764200477.751:84609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 769.494574][ T29] audit: type=1326 audit(1764200477.751:84610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fede5eaf783 code=0x7ffc0000 [ 769.494873][T30276] loop6: detected capacity change from 0 to 512 [ 769.518176][ T29] audit: type=1326 audit(1764200477.751:84611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fede5eae1ff code=0x7ffc0000 [ 769.547977][ T29] audit: type=1326 audit(1764200477.751:84612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fede5eaf7d7 code=0x7ffc0000 [ 769.572601][ T29] audit: type=1326 audit(1764200477.771:84613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fede5eadf90 code=0x7ffc0000 [ 769.596449][ T29] audit: type=1326 audit(1764200477.771:84614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fede5eaf34b code=0x7ffc0000 [ 769.620417][ T29] audit: type=1326 audit(1764200477.851:84615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fede5eae3aa code=0x7ffc0000 [ 769.643920][ T29] audit: type=1326 audit(1764200477.851:84616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fede5eae3aa code=0x7ffc0000 [ 769.667409][ T29] audit: type=1326 audit(1764200477.851:84617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.6.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fede5eade97 code=0x7ffc0000 [ 769.671703][T30276] EXT4-fs (loop6): orphan cleanup on readonly fs [ 769.698114][T30276] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.8807: bad orphan inode 13 [ 769.709926][T30276] ext4_test_bit(bit=12, block=18) = 1 [ 769.715430][T30276] is_bad_inode(inode)=0 [ 769.719668][T30276] NEXT_ORPHAN(inode)=2130706432 [ 769.724590][T30276] max_ino=32 [ 769.728014][T30276] i_nlink=1 [ 769.731825][T30276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 769.762727][T30276] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 769.805939][T30276] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 769.866977][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.919216][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8812'. [ 769.964475][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8812'. [ 769.992275][T30293] loop6: detected capacity change from 0 to 512 [ 770.011404][T30293] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.8812: error while reading EA inode 32 err=-116 [ 770.062063][T30293] EXT4-fs (loop6): Remounting filesystem read-only [ 770.081588][T30293] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 770.105558][T30293] EXT4-fs (loop6): 1 orphan inode deleted [ 770.128698][T30293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.246587][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.273645][T30310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8818'. [ 770.313482][T30310] geneve2: entered promiscuous mode [ 770.318876][T30310] geneve2: entered allmulticast mode [ 771.096212][T30335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8825'. [ 771.140430][T30335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.184363][T30335] bond1 (unregistering): Released all slaves [ 771.289980][T30348] loop7: detected capacity change from 0 to 1024 [ 771.308035][T30348] EXT4-fs: dax option not supported [ 771.440055][T30355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 771.886364][T30367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8835'. [ 771.901462][T30367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.917666][T30367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.926542][T30367] bond1: (slave bond0): Enslaving as an active interface with an up link [ 771.973570][T30367] bond1 (unregistering): (slave bond0): Releasing backup interface [ 771.997451][T30367] bond1 (unregistering): Released all slaves [ 772.187127][T30379] loop7: detected capacity change from 0 to 1024 [ 772.203393][T30379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.238201][T27109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.681630][T30403] loop6: detected capacity change from 0 to 1024 [ 772.716156][T30403] EXT4-fs: dax option not supported [ 773.224224][T30422] pim6reg1: entered promiscuous mode [ 773.229735][T30422] pim6reg1: entered allmulticast mode [ 773.343956][T30430] x_tables: duplicate underflow at hook 2 [ 773.399649][T30435] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.466007][T30435] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.516827][T30435] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.578171][T30435] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.623248][T30037] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.635521][T30037] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.656737][T30037] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.678198][T30037] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.460253][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 774.460273][ T29] audit: type=1326 audit(1764200482.721:85119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.490421][ T29] audit: type=1326 audit(1764200482.721:85120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.514047][ T29] audit: type=1326 audit(1764200482.721:85121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.537773][ T29] audit: type=1326 audit(1764200482.721:85122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.561479][ T29] audit: type=1326 audit(1764200482.721:85123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.585445][ T29] audit: type=1326 audit(1764200482.721:85124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.609138][ T29] audit: type=1326 audit(1764200482.721:85125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.633240][ T29] audit: type=1326 audit(1764200482.721:85126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.656845][ T29] audit: type=1326 audit(1764200482.721:85127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.680965][ T29] audit: type=1326 audit(1764200482.721:85128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30456 comm="syz.4.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b6df749 code=0x7ffc0000 [ 774.812482][T30477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8872'. [ 775.880091][T30519] loop6: detected capacity change from 0 to 1024 [ 775.895563][T30519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.965041][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.992574][T30526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8889'. [ 776.161230][T30526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.188989][T30532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.219849][T30532] bond1: (slave bond0): Enslaving as an active interface with an up link [ 776.229951][T30533] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.273549][T30534] bond1 (unregistering): (slave bond0): Releasing backup interface [ 776.311634][T30534] bond1 (unregistering): Released all slaves [ 776.366530][T30533] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.446177][T30533] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.458055][T30550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8897'. [ 776.506598][T30533] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.556032][T30558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8899'. [ 776.599515][T30558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.646238][T30558] team0: Port device bond0 removed [ 776.662011][T30558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.720032][T30558] bond1: (slave bond0): Enslaving as an active interface with an up link [ 776.747846][T30560] bond1 (unregistering): (slave bond0): Releasing backup interface [ 776.757737][T30560] bond1 (unregistering): Released all slaves [ 776.931256][T30568] syzkaller0: entered promiscuous mode [ 776.936880][T30568] syzkaller0: entered allmulticast mode [ 778.049907][T30020] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.062729][T30020] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.086268][T30020] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.108612][T30020] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.152860][T30605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8916'. [ 778.247508][T30610] x_tables: duplicate underflow at hook 2 [ 778.521595][T30629] loop6: detected capacity change from 0 to 512 [ 778.552761][T30629] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 778.584881][T30629] EXT4-fs (loop6): orphan cleanup on readonly fs [ 778.594984][T30629] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.8915: bad orphan inode 15 [ 778.638476][T30629] ext4_test_bit(bit=14, block=18) = 1 [ 778.644030][T30629] is_bad_inode(inode)=0 [ 778.648308][T30629] NEXT_ORPHAN(inode)=1023 [ 778.652646][T30629] max_ino=32 [ 778.655994][T30629] i_nlink=0 [ 778.670945][T30632] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.806016][T30629] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8915: bg 0: block 161: padding at end of block bitmap is not set [ 778.823837][T30629] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 778.833769][T30629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 778.844546][T30632] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.908422][T30632] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.966886][T30632] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.068167][T30016] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.110547][T30016] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.178092][T30016] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.201307][T23940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.259138][T30016] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.283152][T30644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8930'. [ 779.295666][T30646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8931'. [ 779.347405][T30652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8933'. [ 779.366130][T30652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.382765][T30652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.391351][T30652] bond1: (slave bond0): Enslaving as an active interface with an up link [ 779.420120][T30652] bond1 (unregistering): (slave bond0): Releasing backup interface [ 779.431412][T30652] bond1 (unregistering): Released all slaves [ 779.445444][T30655] syzkaller0: entered promiscuous mode [ 779.450994][T30655] syzkaller0: entered allmulticast mode [ 779.541900][T30666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8938'. [ 779.596349][T30666] x_tables: duplicate underflow at hook 2 [ 779.635413][T30669] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8939'. [ 779.662200][T30669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.716019][T30669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.736195][T30669] bond1: (slave bond0): Enslaving as an active interface with an up link [ 779.786449][T30677] bond1 (unregistering): (slave bond0): Releasing backup interface [ 779.816324][T30677] bond1 (unregistering): Released all slaves [ 779.957163][T30683] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.006295][T30683] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.066662][T30683] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.126857][T30683] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.201194][T30016] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.214124][T30016] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.232587][T30016] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.249700][T30016] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.299977][ T29] kauditd_printk_skb: 715 callbacks suppressed [ 780.299995][ T29] audit: type=1326 audit(1764200488.581:85844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.338030][ T29] audit: type=1326 audit(1764200488.611:85845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.361728][ T29] audit: type=1326 audit(1764200488.611:85846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.385520][ T29] audit: type=1326 audit(1764200488.611:85847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.409285][ T29] audit: type=1326 audit(1764200488.611:85848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.432871][ T29] audit: type=1326 audit(1764200488.611:85849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.456545][ T29] audit: type=1326 audit(1764200488.611:85850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.480204][ T29] audit: type=1326 audit(1764200488.611:85851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.504370][ T29] audit: type=1326 audit(1764200488.611:85852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.528238][ T29] audit: type=1326 audit(1764200488.611:85853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.6.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede5eaf749 code=0x7ffc0000 [ 780.651796][T30704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8952'. [ 780.668413][T30704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 780.684072][T30704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.692956][T30704] bond1: (slave bond0): Enslaving as an active interface with an up link [ 780.807267][T30704] bond1 (unregistering): (slave bond0): Releasing backup interface [ 780.847847][T30704] bond1 (unregistering): Released all slaves [ 781.276377][T30728] x_tables: duplicate underflow at hook 2 [ 781.283431][T14748] IPVS: starting estimator thread 0... [ 781.373254][T30731] syzkaller0: entered promiscuous mode [ 781.378877][T30731] syzkaller0: entered allmulticast mode [ 781.394332][T30729] IPVS: using max 2448 ests per chain, 122400 per kthread [ 782.017470][T30753] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.028007][ T3002] ================================================================== [ 782.036155][ T3002] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 782.044531][ T3002] [ 782.046881][ T3002] write to 0xffff8881371583d0 of 8 bytes by task 20525 on cpu 1: [ 782.054622][ T3002] inode_set_ctime_current+0x533/0x770 [ 782.060126][ T3002] shmem_unlink+0x115/0x170 [ 782.064663][ T3002] vfs_unlink+0x26c/0x420 [ 782.069201][ T3002] do_unlinkat+0x24e/0x480 [ 782.073657][ T3002] __x64_sys_unlink+0x2e/0x40 [ 782.078449][ T3002] x64_sys_call+0x2dcf/0x3000 [ 782.083159][ T3002] do_syscall_64+0xd2/0x200 [ 782.087691][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.093629][ T3002] [ 782.096014][ T3002] read to 0xffff8881371583d0 of 8 bytes by task 3002 on cpu 0: [ 782.103578][ T3002] atime_needs_update+0x2ef/0x3e0 [ 782.108750][ T3002] touch_atime+0x4a/0x340 [ 782.113127][ T3002] do_readlinkat+0x134/0x320 [ 782.117756][ T3002] __x64_sys_readlink+0x47/0x60 [ 782.122655][ T3002] x64_sys_call+0x28de/0x3000 [ 782.127369][ T3002] do_syscall_64+0xd2/0x200 [ 782.131900][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.137869][ T3002] [ 782.140199][ T3002] value changed: 0x0000000069279029 -> 0x000000006927902a [ 782.147302][ T3002] [ 782.149637][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 782.155796][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 782.166679][ T3002] Tainted: [W]=WARN [ 782.170660][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 782.180721][ T3002] ================================================================== [ 782.226889][T30753] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.336193][T30753] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.386624][T30753] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.404795][T30759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 784.540218][T29876] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.551925][T29876] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.563618][T29876] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.575660][T29876] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0