last executing test programs: 2.002420698s ago: executing program 0 (id=407): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x3574, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000001500)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) 1.973811599s ago: executing program 0 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9e8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x200007, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x4, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x408, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x5, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x7fc, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914f, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0xb77, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x2000005, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0x0, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)}, {&(0x7f0000003d00)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x3, &(0x7f0000000f40)=""/214, 0xd6}, 0x101}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/131, 0x83}], 0x2, &(0x7f0000001240)=""/19, 0x13}, 0x800}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/48, 0x30}], 0x8, &(0x7f0000000980)=""/107, 0x6b}, 0x1}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x3}, 0x8}], 0x4, 0x40002003, &(0x7f0000003cc0)) 1.586602125s ago: executing program 3 (id=422): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 1.556189456s ago: executing program 2 (id=424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x4918, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1.536437546s ago: executing program 2 (id=425): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="980b", 0x2}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 953.335365ms ago: executing program 0 (id=431): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 936.895815ms ago: executing program 0 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 917.354366ms ago: executing program 0 (id=434): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 766.585828ms ago: executing program 4 (id=443): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x8000, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYRES16], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100)=0x12) 724.157308ms ago: executing program 3 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2) 693.982689ms ago: executing program 3 (id=447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 667.9998ms ago: executing program 2 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 664.46442ms ago: executing program 1 (id=449): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 620.54728ms ago: executing program 3 (id=450): r0 = syz_io_uring_setup(0x1f87, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x15f1, 0xff98, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 606.7116ms ago: executing program 2 (id=451): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x43c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x0, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x8, 0xfffffffc, 0x1000, 0x2, 0x2000000, 0x4, 0x8, 0x3e, 0x80000001, 0x2, 0x2, 0x81, 0x1, 0xf2f, 0x800, 0x2, 0xff, 0x5, 0x4, 0x3, 0x9, 0x3, 0xc8bd487, 0x9, 0x400, 0x8000, 0x0, 0xfff, 0x3, 0x7, 0x7769, 0xb986, 0x1, 0x2, 0x9, 0xfffffffb, 0xb, 0xb3, 0x400, 0x2, 0x7fff, 0x1c, 0x1, 0x0, 0x9, 0x5, 0x3, 0xe203, 0x100, 0x0, 0x1ff, 0x5, 0x7, 0x9, 0x4, 0x7, 0x4, 0x8, 0x5, 0xfff, 0x80000000, 0x400, 0x7, 0xb6d, 0x143a40, 0xa2, 0x1, 0xffffffff, 0x9, 0x5, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x9, 0x6, 0x7, 0x9, 0x8, 0x8, 0x7fffffff, 0x1200, 0x2, 0x0, 0x8000, 0x1, 0xffffffff, 0xc5c, 0x100, 0x56e, 0x5, 0x9d, 0x3, 0xddae, 0x7f, 0x4, 0x1, 0xffff, 0x1, 0x69, 0xb59, 0x800, 0x0, 0x0, 0x8001, 0x9, 0x3, 0x8, 0x200, 0x1, 0x2, 0x101, 0x1, 0x3, 0x9, 0x1000, 0x3, 0x1, 0x4, 0x0, 0x9, 0x4, 0x7170, 0xf2a, 0x4, 0x9, 0x3, 0xffffff01, 0x2, 0x8, 0x7, 0xb, 0x200, 0x6, 0x7, 0x5a7b, 0xffff, 0x7fff, 0x7ff, 0x80, 0x0, 0xae2, 0x8, 0xfffffff7, 0x9, 0x10001, 0x4, 0x7, 0x7, 0x9, 0x7, 0x0, 0x6, 0x0, 0x3, 0x9, 0x0, 0x9, 0x9, 0x8, 0x9, 0x8000, 0xffffff2f, 0x1, 0x2, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x0, 0xffffffff, 0x9, 0x5, 0xffff, 0xfffffffd, 0x40, 0xfb3, 0x0, 0xfffffffe, 0x0, 0x6, 0x74e40f26, 0x153c, 0x20000000, 0x0, 0x3, 0x600, 0x5, 0xfffffff9, 0x40, 0x3000, 0x8, 0x7, 0xe, 0x3, 0x3, 0x32, 0x7, 0x8, 0x4d19, 0x8, 0x343, 0x0, 0x4, 0xf4c3, 0x2, 0x100, 0x80, 0x5805, 0xffffffff, 0x0, 0x9429, 0x8, 0x7fffffff, 0x101, 0x5, 0x8, 0x9, 0x3, 0xffffffff, 0xfff, 0xd, 0xffffff84, 0x7fffffff, 0x216, 0x1ff, 0x90000000, 0x15, 0x1, 0xff, 0x9, 0x0, 0xffffffff, 0xe3f, 0xa3, 0x5, 0xf, 0x5, 0x8, 0x0, 0x1, 0x9138, 0x100, 0xc1cf, 0x600000]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 540.924331ms ago: executing program 3 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 539.104281ms ago: executing program 2 (id=453): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 497.735132ms ago: executing program 1 (id=454): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 418.362613ms ago: executing program 3 (id=455): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0xfffffffffffffffd) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) 396.127104ms ago: executing program 4 (id=456): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r3, &(0x7f0000000080)={0xed61, 0x1000000000000007}, &(0x7f00000000c0), 0x0) 374.309814ms ago: executing program 4 (id=457): r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000500), 0x66) 348.629125ms ago: executing program 1 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 321.853745ms ago: executing program 1 (id=459): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000400000bbca30000000000002403000040feffff720af0ff0600000071a4f4ff000000001f030000000000002e0a0200000000002600000000ff000e61143400000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c179988"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 313.695265ms ago: executing program 2 (id=460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 194.131197ms ago: executing program 1 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xffe0}, {}, {0x6, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 78.308899ms ago: executing program 4 (id=462): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 61.969889ms ago: executing program 1 (id=463): openat(0xffffffffffffff9c, 0x0, 0x42042, 0x19e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x0, 0xc003, 0x8, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff3d) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x6, 0x4, "a85c45a2c25cc646300200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 39.563299ms ago: executing program 0 (id=464): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 18.3254ms ago: executing program 4 (id=465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 0s ago: executing program 4 (id=466): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 24.887899][ T29] audit: type=1400 audit(1750995443.519:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.888764][ T3295] cgroup: Unknown subsys name 'net' [ 24.910616][ T29] audit: type=1400 audit(1750995443.519:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.937952][ T29] audit: type=1400 audit(1750995443.549:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.130088][ T3295] cgroup: Unknown subsys name 'cpuset' [ 25.136226][ T3295] cgroup: Unknown subsys name 'rlimit' [ 25.305827][ T29] audit: type=1400 audit(1750995443.939:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.329080][ T29] audit: type=1400 audit(1750995443.939:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.349599][ T29] audit: type=1400 audit(1750995443.939:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.356953][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.370032][ T29] audit: type=1400 audit(1750995443.939:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.399279][ T29] audit: type=1400 audit(1750995443.949:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.405566][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.424122][ T29] audit: type=1400 audit(1750995443.949:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.424163][ T29] audit: type=1400 audit(1750995444.019:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.198765][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.254906][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.267762][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.282709][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.335996][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.343198][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.350442][ T3305] bridge_slave_0: entered allmulticast mode [ 27.356912][ T3305] bridge_slave_0: entered promiscuous mode [ 27.371957][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.379095][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.386324][ T3305] bridge_slave_1: entered allmulticast mode [ 27.392668][ T3305] bridge_slave_1: entered promiscuous mode [ 27.421795][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.428827][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.435960][ T3310] bridge_slave_0: entered allmulticast mode [ 27.442524][ T3310] bridge_slave_0: entered promiscuous mode [ 27.465904][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.472996][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.480188][ T3310] bridge_slave_1: entered allmulticast mode [ 27.486652][ T3310] bridge_slave_1: entered promiscuous mode [ 27.492965][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.500201][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.507383][ T3313] bridge_slave_0: entered allmulticast mode [ 27.513876][ T3313] bridge_slave_0: entered promiscuous mode [ 27.520843][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.527911][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.535204][ T3313] bridge_slave_1: entered allmulticast mode [ 27.541649][ T3313] bridge_slave_1: entered promiscuous mode [ 27.553359][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.562487][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.569624][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.576773][ T3307] bridge_slave_0: entered allmulticast mode [ 27.583142][ T3307] bridge_slave_0: entered promiscuous mode [ 27.606440][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.620765][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.627854][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.635101][ T3307] bridge_slave_1: entered allmulticast mode [ 27.641597][ T3307] bridge_slave_1: entered promiscuous mode [ 27.650923][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.665961][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.684174][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.693339][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.703551][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.713262][ T3305] team0: Port device team_slave_0 added [ 27.726807][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.754799][ T3305] team0: Port device team_slave_1 added [ 27.768704][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.783488][ T3310] team0: Port device team_slave_0 added [ 27.789676][ T3313] team0: Port device team_slave_0 added [ 27.812047][ T3310] team0: Port device team_slave_1 added [ 27.818462][ T3307] team0: Port device team_slave_0 added [ 27.824942][ T3313] team0: Port device team_slave_1 added [ 27.832825][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.839834][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.865812][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.886439][ T3307] team0: Port device team_slave_1 added [ 27.897927][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.904922][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.931080][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.942033][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.948968][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.974948][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.011138][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.018089][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.044088][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.055214][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.062262][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.088189][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.099236][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.106229][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.132150][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.143686][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.150748][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.157812][ T3306] bridge_slave_0: entered allmulticast mode [ 28.164301][ T3306] bridge_slave_0: entered promiscuous mode [ 28.173088][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.180066][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.206024][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.219677][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.226638][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.252679][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.263473][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.270583][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.277745][ T3306] bridge_slave_1: entered allmulticast mode [ 28.284235][ T3306] bridge_slave_1: entered promiscuous mode [ 28.318339][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.328938][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.344665][ T3305] hsr_slave_0: entered promiscuous mode [ 28.350655][ T3305] hsr_slave_1: entered promiscuous mode [ 28.362757][ T3310] hsr_slave_0: entered promiscuous mode [ 28.368668][ T3310] hsr_slave_1: entered promiscuous mode [ 28.374620][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.382221][ T3310] Cannot create hsr debugfs directory [ 28.402793][ T3306] team0: Port device team_slave_0 added [ 28.409996][ T3306] team0: Port device team_slave_1 added [ 28.421930][ T3307] hsr_slave_0: entered promiscuous mode [ 28.427912][ T3307] hsr_slave_1: entered promiscuous mode [ 28.433792][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.441376][ T3307] Cannot create hsr debugfs directory [ 28.473395][ T3313] hsr_slave_0: entered promiscuous mode [ 28.479329][ T3313] hsr_slave_1: entered promiscuous mode [ 28.485207][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.492782][ T3313] Cannot create hsr debugfs directory [ 28.506795][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.513775][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.539760][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.567546][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.574608][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.600582][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.674485][ T3306] hsr_slave_0: entered promiscuous mode [ 28.680580][ T3306] hsr_slave_1: entered promiscuous mode [ 28.686383][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.693985][ T3306] Cannot create hsr debugfs directory [ 28.803824][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.812833][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.823344][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.832271][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.851820][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.860609][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.876894][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.886424][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.906024][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.921097][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.932783][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.942666][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.985602][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.996751][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.012960][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.023535][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.032490][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.041002][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.058544][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.065681][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.074673][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.081778][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.110842][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.119270][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.132397][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.150397][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.157395][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.165976][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.188186][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.200985][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.208097][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.219407][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.234160][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.241254][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.251241][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.258325][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.279259][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.286309][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.351311][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.372936][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.403140][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.410226][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.420059][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.427182][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.440646][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.449212][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.468960][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.486922][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.495149][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.502234][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.511772][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.522513][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.529582][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.576439][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.668904][ T3310] veth0_vlan: entered promiscuous mode [ 29.678033][ T3310] veth1_vlan: entered promiscuous mode [ 29.697023][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.704749][ T3313] veth0_vlan: entered promiscuous mode [ 29.720441][ T3313] veth1_vlan: entered promiscuous mode [ 29.735668][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.750933][ T3313] veth0_macvtap: entered promiscuous mode [ 29.762362][ T3313] veth1_macvtap: entered promiscuous mode [ 29.772059][ T3310] veth0_macvtap: entered promiscuous mode [ 29.780436][ T3310] veth1_macvtap: entered promiscuous mode [ 29.805261][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.817510][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.827955][ T3305] veth0_vlan: entered promiscuous mode [ 29.839180][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.848601][ T3305] veth1_vlan: entered promiscuous mode [ 29.856927][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.865541][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.874412][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.883156][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.891962][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.908544][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.917296][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.926033][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.934840][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.961819][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.961833][ T29] audit: type=1400 audit(1750995448.599:81): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DjXQwX/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.966797][ T3305] veth0_macvtap: entered promiscuous mode [ 29.970065][ T29] audit: type=1400 audit(1750995448.599:82): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.020719][ T29] audit: type=1400 audit(1750995448.629:83): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DjXQwX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.037038][ T3305] veth1_macvtap: entered promiscuous mode [ 30.046057][ T29] audit: type=1400 audit(1750995448.629:84): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.062640][ T3307] veth0_vlan: entered promiscuous mode [ 30.073636][ T29] audit: type=1400 audit(1750995448.629:85): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DjXQwX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.087025][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.105479][ T29] audit: type=1400 audit(1750995448.629:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DjXQwX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.127628][ T3307] veth1_vlan: entered promiscuous mode [ 30.140086][ T29] audit: type=1400 audit(1750995448.629:87): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.166254][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.183178][ T3307] veth0_macvtap: entered promiscuous mode [ 30.190379][ T29] audit: type=1400 audit(1750995448.829:88): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.211465][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.221849][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.230606][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.239336][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.248157][ T29] audit: type=1400 audit(1750995448.829:89): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.272422][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.280597][ T3307] veth1_macvtap: entered promiscuous mode [ 30.310449][ T29] audit: type=1400 audit(1750995448.939:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.323003][ T3306] veth0_vlan: entered promiscuous mode [ 30.345783][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.362592][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.370513][ T3476] loop2: detected capacity change from 0 to 512 [ 30.375310][ T3306] veth1_vlan: entered promiscuous mode [ 30.377174][ T3476] EXT4-fs: Ignoring removed oldalloc option [ 30.391106][ T3476] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 30.410852][ T3476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e118, mo2=0002] [ 30.419727][ T3476] System zones: 1-12 [ 30.426157][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.426785][ T3476] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.3: corrupted in-inode xattr: e_name out of bounds [ 30.434913][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.457164][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.465917][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476369][ T3476] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 30.501732][ T3306] veth0_macvtap: entered promiscuous mode [ 30.513319][ T3476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.524314][ T3483] bridge: RTM_NEWNEIGH with invalid ether address [ 30.532417][ T3306] veth1_macvtap: entered promiscuous mode [ 30.576406][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.591437][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.608228][ T3487] sch_fq: defrate 2048 ignored. [ 30.621510][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.630331][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.639141][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.647971][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.658978][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.769256][ T3503] tipc: Started in network mode [ 30.774310][ T3503] tipc: Node identity 82b66e317cac, cluster identity 4711 [ 30.781625][ T3503] tipc: Enabled bearer , priority 0 [ 30.821050][ T3503] tipc: Disabling bearer [ 30.845299][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 30.856328][ T3514] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 30.866179][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 30.876678][ T3514] batman_adv: batadv0: Adding interface: team0 [ 30.882971][ T3514] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.908185][ T3514] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 30.948303][ T3516] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 30.962529][ T3518] loop3: detected capacity change from 0 to 512 [ 30.964998][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.975963][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.986358][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.993467][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.000893][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.007978][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.028748][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 31.039237][ T3518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.059200][ T3516] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 31.077013][ T3525] bridge_slave_1: left allmulticast mode [ 31.082940][ T3525] bridge_slave_1: left promiscuous mode [ 31.088632][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.101690][ T3525] bridge_slave_0: left allmulticast mode [ 31.107414][ T3525] bridge_slave_0: left promiscuous mode [ 31.113101][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.146423][ T3518] EXT4-fs (loop3): 1 orphan inode deleted [ 31.160920][ T1699] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 31.170345][ T3518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.196172][ T3518] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.207384][ T3525] bond0: (slave bridge0): Releasing backup interface [ 31.254748][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.314010][ T3542] loop4: detected capacity change from 0 to 128 [ 31.385353][ T3550] pim6reg1: entered promiscuous mode [ 31.391019][ T3550] pim6reg1: entered allmulticast mode [ 31.415058][ C1] hrtimer: interrupt took 46645 ns [ 31.425138][ T3555] syz.4.28: attempt to access beyond end of device [ 31.425138][ T3555] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 31.444540][ T3555] syz.4.28: attempt to access beyond end of device [ 31.444540][ T3555] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 31.458179][ T3555] syz.4.28: attempt to access beyond end of device [ 31.458179][ T3555] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 31.471826][ T3555] syz.4.28: attempt to access beyond end of device [ 31.471826][ T3555] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 31.494931][ T3555] syz.4.28: attempt to access beyond end of device [ 31.494931][ T3555] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 31.510287][ T3555] syz.4.28: attempt to access beyond end of device [ 31.510287][ T3555] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 31.531011][ T3560] xt_hashlimit: size too large, truncated to 1048576 [ 31.531919][ T3555] syz.4.28: attempt to access beyond end of device [ 31.531919][ T3555] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 31.552319][ T3555] syz.4.28: attempt to access beyond end of device [ 31.552319][ T3555] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 31.566019][ T3555] syz.4.28: attempt to access beyond end of device [ 31.566019][ T3555] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 31.604458][ T3555] syz.4.28: attempt to access beyond end of device [ 31.604458][ T3555] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 31.722154][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 31.731715][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 31.751071][ T3567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.37'. [ 31.787615][ T3569] pim6reg1: entered promiscuous mode [ 31.793038][ T3569] pim6reg1: entered allmulticast mode [ 31.916425][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 31.925496][ T3571] smc: net device bond0 applied user defined pnetid SY [ 31.933294][ T3571] smc: net device bond0 erased user defined pnetid SY [ 32.014453][ T3575] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.054255][ T3577] loop3: detected capacity change from 0 to 764 [ 32.066010][ T3577] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 32.179842][ T3583] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 32.238186][ T2996] udevd[2996]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 32.247111][ T2996] udevd[2996]: worker [3298] failed while handling '/devices/virtual/block/loop4' [ 32.264840][ T3516] syz.0.16 (3516) used greatest stack depth: 10824 bytes left [ 32.377872][ T3601] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.52'. [ 32.439605][ T3612] netlink: zone id is out of range [ 32.444758][ T3612] netlink: zone id is out of range [ 32.449974][ T3612] netlink: zone id is out of range [ 32.455097][ T3612] netlink: zone id is out of range [ 32.460250][ T3612] netlink: zone id is out of range [ 32.576827][ T3617] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.584301][ T3617] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 32.606590][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 33.259145][ T3632] netlink: 372 bytes leftover after parsing attributes in process `syz.4.62'. [ 33.380475][ T3649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3649 comm=syz.4.69 [ 33.462221][ T3655] loop1: detected capacity change from 0 to 512 [ 33.479062][ T3655] EXT4-fs: Ignoring removed i_version option [ 33.506715][ T3655] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.73: corrupted in-inode xattr: overlapping e_value [ 33.532625][ T3655] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.73: couldn't read orphan inode 15 (err -117) [ 33.573427][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.596389][ T3655] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.73: Directory hole found for htree leaf block 0 [ 33.646365][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.756172][ T3683] atomic_op ffff8881196e1128 conn xmit_atomic 0000000000000000 [ 33.986483][ T3722] loop4: detected capacity change from 0 to 128 [ 34.015361][ T3722] EXT4-fs: Ignoring removed oldalloc option [ 34.032145][ T3722] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.050549][ T3722] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.067778][ T3724] loop0: detected capacity change from 0 to 1024 [ 34.084862][ T3724] ======================================================= [ 34.084862][ T3724] WARNING: The mand mount option has been deprecated and [ 34.084862][ T3724] and is ignored by this kernel. Remove the mand [ 34.084862][ T3724] option from the mount to silence this warning. [ 34.084862][ T3724] ======================================================= [ 34.152813][ T3732] @: renamed from vlan0 (while UP) [ 34.186823][ T3724] EXT4-fs: inline encryption not supported [ 34.205209][ T3724] EXT4-fs: Ignoring removed bh option [ 34.224202][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.242235][ T3724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.393007][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.578762][ T3778] netlink: 'syz.4.125': attribute type 4 has an invalid length. [ 34.664163][ T3784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.671516][ T3784] IPv6: NLM_F_CREATE should be set when creating new route [ 34.692182][ T3782] loop0: detected capacity change from 0 to 512 [ 34.700183][ T3782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.730766][ T3782] EXT4-fs (loop0): 1 truncate cleaned up [ 34.736982][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.753420][ T3793] loop3: detected capacity change from 0 to 256 [ 34.782060][ T3796] pim6reg1: entered promiscuous mode [ 34.787460][ T3796] pim6reg1: entered allmulticast mode [ 34.822095][ T3799] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.134' sets config #0 [ 34.878680][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.893645][ T3805] loop1: detected capacity change from 0 to 1024 [ 34.927950][ T3816] process 'syz.0.141' launched './file1' with NULL argv: empty string added [ 34.937076][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.163975][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 35.163987][ T29] audit: type=1400 audit(1750995453.799:655): avc: denied { shutdown } for pid=3838 comm="syz.4.149" lport=58995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.229188][ T29] audit: type=1400 audit(1750995453.829:656): avc: denied { getopt } for pid=3838 comm="syz.4.149" lport=58995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.290282][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.313759][ T29] audit: type=1326 audit(1750995453.939:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb428e929 code=0x7ffc0000 [ 35.337166][ T29] audit: type=1326 audit(1750995453.949:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f5bb428e929 code=0x7ffc0000 [ 35.360308][ T29] audit: type=1326 audit(1750995453.949:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb428e929 code=0x7ffc0000 [ 35.429556][ T29] audit: type=1326 audit(1750995454.049:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fdee929 code=0x7ffc0000 [ 35.453129][ T29] audit: type=1326 audit(1750995454.049:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fdee929 code=0x7ffc0000 [ 35.476386][ T29] audit: type=1326 audit(1750995454.049:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f488fdee929 code=0x7ffc0000 [ 35.499958][ T29] audit: type=1326 audit(1750995454.049:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fdee929 code=0x7ffc0000 [ 35.523695][ T29] audit: type=1326 audit(1750995454.049:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488fdee929 code=0x7ffc0000 [ 35.551185][ T3852] loop3: detected capacity change from 0 to 512 [ 35.588911][ T3852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.613326][ T3852] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.641865][ T3860] netlink: 'syz.1.154': attribute type 9 has an invalid length. [ 35.660317][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.903326][ T3879] __nla_validate_parse: 6 callbacks suppressed [ 35.903340][ T3879] netlink: 532 bytes leftover after parsing attributes in process `syz.1.167'. [ 36.047458][ T3898] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 36.091208][ T3898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.115293][ T3825] syz.2.145 (3825) used greatest stack depth: 6952 bytes left [ 36.132622][ T3898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.146421][ T3898] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 36.158869][ T3898] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 36.317498][ T3935] pim6reg1: entered promiscuous mode [ 36.322924][ T3935] pim6reg1: entered allmulticast mode [ 36.422861][ T3952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3952 comm=syz.0.196 [ 36.436112][ T3952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3952 comm=syz.0.196 [ 36.453891][ T3959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.488850][ T3963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'. [ 36.539913][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 36.569244][ T3975] loop2: detected capacity change from 0 to 256 [ 36.621627][ T3980] loop4: detected capacity change from 0 to 512 [ 36.653650][ T3980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.695434][ T3987] netlink: 96 bytes leftover after parsing attributes in process `syz.2.208'. [ 36.716419][ T3980] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.929262][ T3995] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.950181][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.996793][ T4001] loop3: detected capacity change from 0 to 512 [ 37.008646][ T4001] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.040464][ T4001] EXT4-fs (loop3): 1 truncate cleaned up [ 37.046685][ T4001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.076353][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.098709][ T4011] veth0_vlan: entered allmulticast mode [ 37.123614][ T4011] ÿÿÿÿÿÿ: renamed from vlan1 [ 37.331219][ T4037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 37.337823][ T4037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.345350][ T4037] vhci_hcd vhci_hcd.0: Device attached [ 37.368571][ T4038] vhci_hcd: cannot find the pending unlink 2 [ 37.380502][ T4038] vhci_hcd: connection closed [ 37.380664][ T564] vhci_hcd: stop threads [ 37.389628][ T564] vhci_hcd: release socket [ 37.394044][ T564] vhci_hcd: disconnect device [ 37.458363][ T4043] loop4: detected capacity change from 0 to 256 [ 37.471246][ T4043] FAT-fs (loop4): bogus number of FAT sectors [ 37.477394][ T4043] FAT-fs (loop4): Can't find a valid FAT filesystem [ 37.586398][ T4050] loop4: detected capacity change from 0 to 1024 [ 37.593554][ T4050] EXT4-fs: Ignoring removed nobh option [ 37.599170][ T4050] EXT4-fs: Ignoring removed bh option [ 37.611212][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.628223][ T4050] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.233: error while reading EA inode 32 err=-116 [ 37.640726][ T4050] EXT4-fs (loop4): Remounting filesystem read-only [ 37.647350][ T4050] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.233: cleanup dec ref error -30 [ 37.660163][ T4050] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.233: dec ref error=-30 [ 37.680869][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.838070][ T4061] loop4: detected capacity change from 0 to 128 [ 38.167204][ T4092] loop4: detected capacity change from 0 to 128 [ 38.174172][ T4092] EXT4-fs: Ignoring removed nobh option [ 38.181482][ T4092] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.194136][ T4092] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.219807][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.239222][ T4096] 9pnet: p9_errstr2errno: server reported unknown error [ 38.297181][ T4099] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.253'. [ 38.379288][ T4105] loop4: detected capacity change from 0 to 128 [ 38.501745][ T4112] netlink: 'syz.4.259': attribute type 7 has an invalid length. [ 38.509612][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 38.573819][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 38.582713][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 38.595848][ T4118] wireguard0: entered promiscuous mode [ 38.601385][ T4118] wireguard0: entered allmulticast mode [ 38.764162][ T4133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4133 comm=syz.4.269 [ 38.931707][ T4149] loop2: detected capacity change from 0 to 512 [ 38.939055][ T4149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.951391][ T4149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.958063][ T4149] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.277: Failed to acquire dquot type 1 [ 38.970565][ T4149] EXT4-fs (loop2): 1 truncate cleaned up [ 38.976638][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 38.994069][ T4151] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 39.009609][ T4149] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 39.035698][ T4158] netlink: 'syz.4.281': attribute type 21 has an invalid length. [ 39.044716][ T4158] netlink: 132 bytes leftover after parsing attributes in process `syz.4.281'. [ 39.053917][ T4149] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 39.053917][ T4149] [ 39.100503][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 39.184286][ T10] IPVS: starting estimator thread 0... [ 39.195481][ T4181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 39.216968][ T4188] ip6gre1: entered allmulticast mode [ 39.300963][ T4183] IPVS: using max 2736 ests per chain, 136800 per kthread [ 39.556524][ T4235] Zero length message leads to an empty skb [ 39.604223][ T4239] loop2: detected capacity change from 0 to 128 [ 39.622838][ T4243] program syz.1.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.633479][ T4239] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.644849][ T4243] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 39.674114][ T4239] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.722498][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.059802][ T4229] Set syz1 is full, maxelem 65536 reached [ 40.188832][ T4291] netlink: 'syz.1.340': attribute type 30 has an invalid length. [ 40.198679][ T4293] xt_hashlimit: max too large, truncated to 1048576 [ 40.200772][ T4291] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.214072][ T4291] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.220900][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 40.220914][ T29] audit: type=1400 audit(1750995458.849:905): avc: denied { write } for pid=4296 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.223013][ T4291] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.257108][ T4291] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.258784][ T4295] loop2: detected capacity change from 0 to 512 [ 40.266226][ T29] audit: type=1400 audit(1750995458.889:906): avc: denied { setopt } for pid=4296 comm="syz.0.343" lport=41559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.292633][ T29] audit: type=1400 audit(1750995458.889:907): avc: denied { getopt } for pid=4296 comm="syz.0.343" lport=41559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.318653][ T4291] netlink: 'syz.1.340': attribute type 30 has an invalid length. [ 40.343861][ T4295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.366247][ T4295] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.388677][ T29] audit: type=1400 audit(1750995459.019:908): avc: denied { create } for pid=4294 comm="syz.2.342" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.410028][ T29] audit: type=1400 audit(1750995459.049:909): avc: denied { read write } for pid=4294 comm="syz.2.342" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.432799][ T29] audit: type=1400 audit(1750995459.049:910): avc: denied { open } for pid=4294 comm="syz.2.342" path="/61/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.464150][ T29] audit: type=1400 audit(1750995459.049:911): avc: denied { setattr } for pid=4294 comm="syz.2.342" path="/61/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.489145][ T29] audit: type=1326 audit(1750995459.119:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb428e929 code=0x7ffc0000 [ 40.517913][ T29] audit: type=1326 audit(1750995459.149:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bb428e929 code=0x7ffc0000 [ 40.541258][ T29] audit: type=1326 audit(1750995459.149:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb428e929 code=0x7ffc0000 [ 40.607978][ T4313] loop1: detected capacity change from 0 to 512 [ 40.643175][ T4313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.659734][ T4313] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.708979][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.855679][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.959383][ T4343] Driver unsupported XDP return value 0 on prog (id 328) dev N/A, expect packet loss! [ 41.162252][ T4363] loop1: detected capacity change from 0 to 2048 [ 41.182056][ T4363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.296788][ T4375] __nla_validate_parse: 7 callbacks suppressed [ 41.296802][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 41.313891][ T4371] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.317406][ T4375] team1: entered promiscuous mode [ 41.334291][ T4375] team1: entered allmulticast mode [ 41.359894][ T4371] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 41.372164][ T4371] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.372164][ T4371] [ 41.381939][ T4371] EXT4-fs (loop1): Total free blocks count 0 [ 41.387925][ T4371] EXT4-fs (loop1): Free/Dirty block details [ 41.393862][ T4371] EXT4-fs (loop1): free_blocks=2415919504 [ 41.399713][ T4371] EXT4-fs (loop1): dirty_blocks=864 [ 41.404957][ T4371] EXT4-fs (loop1): Block reservation details [ 41.410956][ T4371] EXT4-fs (loop1): i_reserved_data_blocks=54 [ 41.430395][ T4371] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.640592][ T4391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.381'. [ 41.885209][ T4408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.389'. [ 42.080554][ T4437] netlink: 56 bytes leftover after parsing attributes in process `syz.2.403'. [ 42.102761][ T4439] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.399'. [ 42.111964][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 42.197784][ T4444] netlink: 52 bytes leftover after parsing attributes in process `syz.0.406'. [ 42.261138][ T4452] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.409'. [ 42.369334][ T4458] netlink: 256 bytes leftover after parsing attributes in process `syz.1.411'. [ 43.150909][ T4496] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 43.177770][ T4498] loop4: detected capacity change from 0 to 2048 [ 43.191240][ T4498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.257905][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.341320][ T4514] 9pnet: p9_errstr2errno: server reported unknown error [ 43.633586][ T4543] Cannot find add_set index 0 as target [ 43.712550][ T4549] pim6reg1: entered promiscuous mode [ 43.717960][ T4549] pim6reg1: entered allmulticast mode [ 43.925201][ T4564] loop2: detected capacity change from 0 to 128 [ 44.242745][ T4564] ================================================================== [ 44.250868][ T4564] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 44.258868][ T4564] [ 44.261188][ T4564] write to 0xffff888106b9e314 of 4 bytes by task 4566 on cpu 0: [ 44.268820][ T4564] xas_set_mark+0x12b/0x140 [ 44.273356][ T4564] tag_pages_for_writeback+0xc2/0x290 [ 44.278731][ T4564] writeback_iter+0x340/0x820 [ 44.283416][ T4564] mpage_writepages+0x87/0x1250 [ 44.288276][ T4564] fat_writepages+0x24/0x30 [ 44.292791][ T4564] do_writepages+0x1c6/0x310 [ 44.297384][ T4564] file_write_and_wait_range+0x156/0x2c0 [ 44.303030][ T4564] __generic_file_fsync+0x46/0x140 [ 44.308157][ T4564] fat_file_fsync+0x49/0x100 [ 44.312762][ T4564] vfs_fsync_range+0x10a/0x130 [ 44.317537][ T4564] generic_file_write_iter+0x1b8/0x2f0 [ 44.323000][ T4564] iter_file_splice_write+0x5ef/0x970 [ 44.328387][ T4564] direct_splice_actor+0x153/0x2a0 [ 44.333514][ T4564] splice_direct_to_actor+0x30f/0x680 [ 44.338894][ T4564] do_splice_direct+0xda/0x150 [ 44.343670][ T4564] do_sendfile+0x380/0x650 [ 44.348097][ T4564] __x64_sys_sendfile64+0x105/0x150 [ 44.353310][ T4564] x64_sys_call+0xb39/0x2fb0 [ 44.357911][ T4564] do_syscall_64+0xd2/0x200 [ 44.362411][ T4564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.368316][ T4564] [ 44.370659][ T4564] read to 0xffff888106b9e314 of 4 bytes by task 4564 on cpu 1: [ 44.378205][ T4564] file_write_and_wait_range+0x10e/0x2c0 [ 44.383855][ T4564] __generic_file_fsync+0x46/0x140 [ 44.388985][ T4564] fat_file_fsync+0x49/0x100 [ 44.393582][ T4564] vfs_fsync_range+0x10a/0x130 [ 44.398365][ T4564] generic_file_write_iter+0x1b8/0x2f0 [ 44.403827][ T4564] iter_file_splice_write+0x5ef/0x970 [ 44.409212][ T4564] direct_splice_actor+0x153/0x2a0 [ 44.414336][ T4564] splice_direct_to_actor+0x30f/0x680 [ 44.419720][ T4564] do_splice_direct+0xda/0x150 [ 44.424502][ T4564] do_sendfile+0x380/0x650 [ 44.428930][ T4564] __x64_sys_sendfile64+0x105/0x150 [ 44.434140][ T4564] x64_sys_call+0xb39/0x2fb0 [ 44.438740][ T4564] do_syscall_64+0xd2/0x200 [ 44.443253][ T4564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.449157][ T4564] [ 44.451477][ T4564] value changed: 0x02000021 -> 0x04000021 [ 44.457191][ T4564] [ 44.459515][ T4564] Reported by Kernel Concurrency Sanitizer on: [ 44.465674][ T4564] CPU: 1 UID: 0 PID: 4564 Comm: syz.2.460 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 44.478255][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.488304][ T4564] ================================================================== [ 44.548714][ T4564] ================================================================== [ 44.556810][ T4564] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 44.564694][ T4564] [ 44.566996][ T4564] write to 0xffff888106b9e314 of 4 bytes by task 4566 on cpu 0: [ 44.574603][ T4564] xas_set_mark+0x12b/0x140 [ 44.579093][ T4564] __folio_start_writeback+0x1dd/0x440 [ 44.584539][ T4564] __block_write_full_folio+0x53a/0x8f0 [ 44.590073][ T4564] block_write_full_folio+0x2c2/0x2e0 [ 44.595426][ T4564] mpage_writepages+0x6cf/0x1250 [ 44.600348][ T4564] fat_writepages+0x24/0x30 [ 44.604860][ T4564] do_writepages+0x1c6/0x310 [ 44.609436][ T4564] file_write_and_wait_range+0x156/0x2c0 [ 44.615059][ T4564] __generic_file_fsync+0x46/0x140 [ 44.620166][ T4564] fat_file_fsync+0x49/0x100 [ 44.624745][ T4564] vfs_fsync_range+0x10a/0x130 [ 44.629529][ T4564] generic_file_write_iter+0x1b8/0x2f0 [ 44.634974][ T4564] iter_file_splice_write+0x5ef/0x970 [ 44.640329][ T4564] direct_splice_actor+0x153/0x2a0 [ 44.645433][ T4564] splice_direct_to_actor+0x30f/0x680 [ 44.650813][ T4564] do_splice_direct+0xda/0x150 [ 44.655562][ T4564] do_sendfile+0x380/0x650 [ 44.659959][ T4564] __x64_sys_sendfile64+0x105/0x150 [ 44.665136][ T4564] x64_sys_call+0xb39/0x2fb0 [ 44.669711][ T4564] do_syscall_64+0xd2/0x200 [ 44.674195][ T4564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.680068][ T4564] [ 44.682384][ T4564] read to 0xffff888106b9e314 of 4 bytes by task 4564 on cpu 1: [ 44.690086][ T4564] __writeback_single_inode+0x1f9/0x7c0 [ 44.695633][ T4564] writeback_single_inode+0x167/0x3e0 [ 44.700992][ T4564] sync_inode_metadata+0x5b/0x90 [ 44.705929][ T4564] __generic_file_fsync+0xf8/0x140 [ 44.711029][ T4564] fat_file_fsync+0x49/0x100 [ 44.715699][ T4564] vfs_fsync_range+0x10a/0x130 [ 44.720451][ T4564] generic_file_write_iter+0x1b8/0x2f0 [ 44.725989][ T4564] iter_file_splice_write+0x5ef/0x970 [ 44.731376][ T4564] direct_splice_actor+0x153/0x2a0 [ 44.736473][ T4564] splice_direct_to_actor+0x30f/0x680 [ 44.741826][ T4564] do_splice_direct+0xda/0x150 [ 44.746582][ T4564] do_sendfile+0x380/0x650 [ 44.751008][ T4564] __x64_sys_sendfile64+0x105/0x150 [ 44.756214][ T4564] x64_sys_call+0xb39/0x2fb0 [ 44.760815][ T4564] do_syscall_64+0xd2/0x200 [ 44.765332][ T4564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.771241][ T4564] [ 44.773576][ T4564] value changed: 0x0a000021 -> 0x04000021 [ 44.779291][ T4564] [ 44.781614][ T4564] Reported by Kernel Concurrency Sanitizer on: [ 44.787764][ T4564] CPU: 1 UID: 0 PID: 4564 Comm: syz.2.460 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 44.800098][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.810162][ T4564] ==================================================================