last executing test programs: 3.583642258s ago: executing program 2 (id=338): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x0, 0x0, 0x0, 0xd24e}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x8}, {0x0, 0xff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x98}}, 0x0) r3 = io_uring_setup(0x79af, &(0x7f0000001240)) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000f80)={@val={0x8, 0x800}, @val={0x7}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0xb56, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x0, 0xb42, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "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"}}}}, 0xb64) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES32], 0x1c}}, 0x0) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) listen(r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) 3.538955702s ago: executing program 1 (id=339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000001e6400000000000045040300010000001704000001000a00b7040000ff010000720a8dfe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f7604e26f7fcc059c062234d5595f6fbaa187b81d1106000000040f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000a08612a29fc691e4f1f7bd053abb880039381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c16dc91142a4ea260532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f67906a5963d4fa3e26cc05972c162f223f000000d699e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001200), 0x88000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000004340)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a5a4c00000000bfa20000ca48000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRES16=r4, @ANYRESHEX=r5, @ANYRES64=r6, @ANYBLOB="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", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x3f6, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 3.514689404s ago: executing program 2 (id=340): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) socket$inet(0x2, 0x80001, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 3.504134645s ago: executing program 4 (id=341): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x42e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f0000000640)='./bus\x00', 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x18, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 3.492881926s ago: executing program 2 (id=342): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x77, 0xfc, 0x58, 0x10, 0x7104, 0x2202, 0x7a54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0x3b, 0x1, 0x0, 0x9a, 0xe3, 0x10, 0x5e}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000100)) io_setup(0x2004, &(0x7f0000000680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) iopl(0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xfeffffff) 3.196988323s ago: executing program 3 (id=346): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.165693787s ago: executing program 3 (id=347): syz_emit_ethernet(0x1f, &(0x7f0000000080)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", '~b^', 0x0, "00cfb759d0d50b000c"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) fallocate(r5, 0x1, 0x0, 0x1001f0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time_for_children\x00') sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001c00)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 3.165266297s ago: executing program 4 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) syz_usbip_server_init(0x5) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5f39, 0x0, 0x400000, 0x125}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) unshare(0x2a020480) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.043802478s ago: executing program 3 (id=350): syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, &(0x7f0000000000)=0x800000000101, 0x29, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) io_setup(0x8, &(0x7f0000000000)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) ioctl$TCFLSH(r3, 0x5608, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x4083, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x100001ff) sendto$inet(r4, &(0x7f0000000140)="eb", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000002010400000000000000000a00000004000380300002802c00018014000300fce9ff0000000000000000000000000014005ea8ff020000000000000000000000000001040001"], 0x4c}}, 0x0) 2.991483493s ago: executing program 3 (id=351): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7d09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x26, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x1, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x800010, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000440), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/198, 0xc6}], 0x1) 2.899066141s ago: executing program 2 (id=352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.735850056s ago: executing program 1 (id=353): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) socket$inet(0x2, 0x80001, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 2.720056728s ago: executing program 1 (id=354): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r5 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000ec0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file1'}, {{0x0, 0x2}, 0x0, 0x6, 0x7, './file2'}]}}, 0x49) sendfile(r5, r5, &(0x7f0000000240), 0x7f03) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x99, 0x9}}, './file0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$qrtrtun(r7, &(0x7f0000000100)=""/241, 0xf1) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x4000}) close_range(r6, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000200)=""/92, 0x57}, {&(0x7f0000004240)=""/4100, 0x1004}], 0x70, &(0x7f00000011c0)=[{0xffffffffffffffff}], 0x1, 0x0) syz_io_uring_setup(0x4425, &(0x7f0000000000)={0x0, 0xd6a6, 0x40, 0x3, 0xf0}, &(0x7f0000000080), &(0x7f00000000c0)) 2.128528533s ago: executing program 3 (id=356): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x500, &(0x7f0000003480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() epoll_create1(0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[], 0xfe6f) 2.128125713s ago: executing program 4 (id=357): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.127764523s ago: executing program 0 (id=358): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xca04, &(0x7f0000000500)=ANY=[], 0x1, 0x2df, &(0x7f00000007c0)="$eJzs3U9rY1UUAPDz0tck1UWKuFFcPNCFqzJ166ZVRhC7UiKoCy1OByQpAy0UpoLprPwELv0efgQ3bvwGglvBXV1Ur7x/aTKmmXZmMqLz+216eu89953cC2k3OfnitcPRnXtZPDj/JbLIorMTO/FXFpvRidZZ5NM4Uq8JZsYAgP+UP1KK39ONUpp/APLOaioCAFat/vtfu0Ha2QpLAgBW7KNPPv1gd2/v9odF0Y9XBpENs4g4/PZkWM/v3o2vYhwHcSsGcRGRpur4vff3bkdelDbjjcPJybDMPPz8p2b/3d8iqvztGExicf52UZvJn5wM1+OFKGL37npb6iBeXpz/1oL8GHbjzddn6t+KQfz8ZdyLcdyp6rjM/2a7KN5N351//Vn52sv8rBPDXrWuVFeQ1qofG8/4ggAAAAAAAAAAAAAAAAAAAAAA+F/aKoqsbt9T9e8ph5r+O2sX1fxW01ynyGOuP0+Tn7Ub1f2BUtviZ5Li+7a/zq2iKFKz8LK/Tx6v5r5EAAAAAAAAAAAAAAAAAAAAAErH909H++PxwdFTCdpuAO3H+h93n53Lkd5cuQ8v7sV+taB7rWfNdhsoa126OPI8lm64cZ5qj35dnfahi9dsXD31BEHv8nI/jjpoL+aJdk4P3cVL79S/n472i/JY7p+O2kMe7WePela/3eeH2aluzC8uT+hmpaaqwos0f6f9aanlaZyVFVZT3ad08t0XF079mVK63j5v/1rfUTOSVS02rvf09SaYSZ9f0//nXfx49YZXvmWsPf67DQAAAAAAAAAAAAAAAAAAsEz9Wd+zg6PjBZMPlqZ2VlYUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxj9ff/jw+OpkE/IpqR6M9PtcGkSV4wVQeb05FuHB3/yy8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA58DfAQAA//+IV0eN") recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) close_range(r2, r2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sched_rr_get_interval(r0, &(0x7f0000000080)) 2.127447653s ago: executing program 1 (id=359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x805000, &(0x7f00000002c0), 0x0, 0x250, &(0x7f0000001480)="$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") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r4, &(0x7f0000000740)=""/384, 0x200008c0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.122381573s ago: executing program 4 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='ext4_ext_convert_to_initialized_fastpath\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r6) 2.064919478s ago: executing program 0 (id=361): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3d5b, 0x0, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x40000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x2f0, 0x460, 0x460, 0x2f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0xf8, 0x220, 0x0, {0x9401}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modules_dep_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0xe4030000}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendto$packet(r0, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14) 1.867114337s ago: executing program 2 (id=362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x3}, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) execveat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./bus/file0\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nouid32}, {@minixdf}], [{@subj_type={'subj_type', 0x3d, '\'\\'}}]}, 0x1, 0x504, &(0x7f0000001480)="$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") perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b389"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}, 0x1, 0x0, 0x0, 0x4815}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x7fff, 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r7, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r6, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000380)={0x2, 0x0, {0x3, 0x0, 0x1, 0x1, 0x400}, 0x4}) 996.962077ms ago: executing program 3 (id=363): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@nodelalloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000200000000000000000000000018110015", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 971.1759ms ago: executing program 1 (id=364): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000005}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000140001ed13bd7000000000000a84b7c6fc"], 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 902.318446ms ago: executing program 4 (id=365): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000001000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) socket$inet(0x2, 0x80001, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 858.25787ms ago: executing program 0 (id=366): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xca04, &(0x7f0000000500)=ANY=[], 0x1, 0x2df, &(0x7f00000007c0)="$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") 854.25221ms ago: executing program 4 (id=367): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r5 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000ec0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file1'}, {{0x0, 0x2}, 0x0, 0x6, 0x7, './file2'}]}}, 0x49) sendfile(r5, r5, &(0x7f0000000240), 0x7f03) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x99, 0x9}}, './file0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$qrtrtun(r7, &(0x7f0000000100)=""/241, 0xf1) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x4000}) close_range(r6, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000200)=""/92, 0x57}, {&(0x7f0000004240)=""/4100, 0x1004}], 0x70, &(0x7f00000011c0)=[{0xffffffffffffffff}], 0x1, 0x0) syz_io_uring_setup(0x4425, &(0x7f0000000000)={0x0, 0xd6a6, 0x40, 0x3, 0xf0}, &(0x7f0000000080), &(0x7f00000000c0)) 696.883405ms ago: executing program 0 (id=368): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 73.142253ms ago: executing program 1 (id=369): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x3aa4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 72.630493ms ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) syz_usbip_server_init(0x5) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5f39, 0x0, 0x400000, 0x125}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) unshare(0x2a020480) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) 28.822186ms ago: executing program 0 (id=371): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 0s ago: executing program 0 (id=372): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) kernel console output (not intermixed with test programs): e=1 [ 27.208334][ T3428] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 27.209780][ T3419] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 27.228194][ T3428] team0: Failed to send options change via netlink (err -105) [ 27.237962][ T3428] team0: Port device netdevsim1 added [ 27.250761][ T29] audit: type=1400 audit(1727929742.137:131): avc: denied { write } for pid=3413 comm="syz.1.2" name="001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.273327][ T29] audit: type=1400 audit(1727929742.147:132): avc: denied { mount } for pid=3418 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.294781][ T29] audit: type=1400 audit(1727929742.157:133): avc: denied { write } for pid=3418 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.316110][ T29] audit: type=1400 audit(1727929742.157:134): avc: denied { add_name } for pid=3418 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.344505][ T3431] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 27.355827][ T50] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 27.379715][ T3419] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 27.395730][ T3419] bridge0: port 3(team0) entered blocking state [ 27.402153][ T3419] bridge0: port 3(team0) entered disabled state [ 27.413704][ T3419] team0: entered allmulticast mode [ 27.418875][ T3419] team_slave_0: entered allmulticast mode [ 27.424728][ T3419] team_slave_1: entered allmulticast mode [ 27.435834][ T3419] team0: entered promiscuous mode [ 27.440879][ T3419] team_slave_0: entered promiscuous mode [ 27.446734][ T3419] team_slave_1: entered promiscuous mode [ 27.464113][ T3419] bridge0: port 3(team0) entered blocking state [ 27.470412][ T3419] bridge0: port 3(team0) entered forwarding state [ 27.533577][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.638758][ T3436] process 'syz.0.7' launched './file1' with NULL argv: empty string added [ 27.780018][ T3438] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 27.786565][ T3438] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 27.794374][ T3438] vhci_hcd vhci_hcd.0: Device attached [ 27.880410][ T3445] loop0: detected capacity change from 0 to 1024 [ 27.902441][ T3445] ======================================================= [ 27.902441][ T3445] WARNING: The mand mount option has been deprecated and [ 27.902441][ T3445] and is ignored by this kernel. Remove the mand [ 27.902441][ T3445] option from the mount to silence this warning. [ 27.902441][ T3445] ======================================================= [ 27.939043][ T3443] vhci_hcd: connection closed [ 27.939303][ T3293] vhci_hcd: stop threads [ 27.948337][ T3293] vhci_hcd: release socket [ 27.952745][ T3293] vhci_hcd: disconnect device [ 27.985214][ T3445] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 28.043822][ T3445] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7: Invalid block bitmap block 0 in block_group 0 [ 28.081067][ T3448] loop2: detected capacity change from 0 to 256 [ 28.100633][ T3448] FAT-fs (loop2): Directory bread(block 64) failed [ 28.116802][ T3448] FAT-fs (loop2): Directory bread(block 65) failed [ 28.123569][ T3445] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.7: Failed to acquire dquot type 0 [ 28.137293][ T3448] FAT-fs (loop2): Directory bread(block 66) failed [ 28.143809][ T3448] FAT-fs (loop2): Directory bread(block 67) failed [ 28.160721][ T3445] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.7: Freeing blocks not in datazone - block = 0, count = 4096 [ 28.174108][ T3448] FAT-fs (loop2): Directory bread(block 68) failed [ 28.180810][ T3448] FAT-fs (loop2): Directory bread(block 69) failed [ 28.194398][ T3448] FAT-fs (loop2): Directory bread(block 70) failed [ 28.201333][ T3445] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.7: Invalid inode bitmap blk 0 in block_group 0 [ 28.214240][ T3293] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 0 [ 28.234883][ T3448] FAT-fs (loop2): Directory bread(block 71) failed [ 28.241627][ T3448] FAT-fs (loop2): Directory bread(block 72) failed [ 28.251866][ T3445] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 28.272002][ T3448] FAT-fs (loop2): Directory bread(block 73) failed [ 28.279214][ T3445] EXT4-fs (loop0): 1 orphan inode deleted [ 28.285849][ T3445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.325689][ T3445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.341851][ T3448] loop2: detected capacity change from 0 to 256 [ 28.441363][ T3450] loop2: detected capacity change from 0 to 1024 [ 28.483220][ T3445] syz.0.7 (3445) used greatest stack depth: 9616 bytes left [ 28.491267][ T3450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.631106][ T3454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 28.647791][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.704736][ T3450] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 28.711998][ T3411] loop4: detected capacity change from 0 to 512 [ 28.723912][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.732626][ T3411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.749337][ T3411] EXT4-fs (loop4): orphan cleanup on readonly fs [ 28.751705][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.768226][ T3411] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set [ 28.768392][ T3411] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.5: Failed to acquire dquot type 1 [ 28.768836][ T3411] EXT4-fs (loop4): 1 truncate cleaned up [ 28.817959][ T3411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.877212][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 28.932546][ T3411] syz.4.5 (3411) used greatest stack depth: 9384 bytes left [ 29.259177][ T3471] Dead loop on virtual device ip6_vti0, fix it urgently! [ 29.342929][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.429237][ T3473] loop4: detected capacity change from 0 to 2048 [ 29.485467][ T3473] loop4: p1 < > p3 [ 29.491150][ T3473] loop4: p3 size 134217728 extends beyond EOD, truncated [ 29.512289][ T2966] loop4: p1 < > p3 [ 29.516629][ T2966] loop4: p3 size 134217728 extends beyond EOD, truncated [ 29.723552][ T3476] can0: slcan on ttyS3. [ 29.765831][ T3476] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use) [ 29.824295][ T3476] can0 (unregistered): slcan off ttyS3. [ 29.832009][ T3476] Falling back ldisc for ttyS3. [ 29.883498][ T3485] loop1: detected capacity change from 0 to 512 [ 29.894698][ T3485] EXT4-fs: Ignoring removed nobh option [ 29.924148][ T3485] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 29.932715][ T3485] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #13: comm syz.1.19: casefold flag without casefold feature [ 29.946284][ T3485] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.19: couldn't read orphan inode 13 (err -117) [ 29.960473][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.977660][ T3485] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.19: corrupted in-inode xattr: overlapping e_value [ 30.016542][ T3505] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.032077][ T3505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 30.056856][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.162573][ T3523] loop1: detected capacity change from 0 to 2048 [ 30.195950][ T3523] Alternate GPT is invalid, using primary GPT. [ 30.202322][ T3523] loop1: p1 p2 p3 [ 30.228974][ T3525] netlink: 256 bytes leftover after parsing attributes in process `syz.3.26'. [ 30.238200][ T3525] unsupported nlmsg_type 40 [ 30.273345][ T3523] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 30.273345][ T3523] program syz.1.24 not setting count and/or reply_len properly [ 30.328007][ T3538] loop1: detected capacity change from 0 to 2048 [ 30.346225][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.411495][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 30.492402][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.578465][ T3552] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 30.586397][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.593781][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.604538][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.611611][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.618922][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.626041][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.634908][ T3552] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 30.644482][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 30.653335][ T3555] bridge_slave_1: left allmulticast mode [ 30.659220][ T3555] bridge_slave_1: left promiscuous mode [ 30.665022][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.672840][ T3555] bridge_slave_0: left allmulticast mode [ 30.678791][ T3555] bridge_slave_0: left promiscuous mode [ 30.684513][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.695005][ T3555] bond0: (slave bridge0): Releasing backup interface [ 30.817705][ T3557] netlink: 'syz.1.32': attribute type 9 has an invalid length. [ 30.981273][ T3562] loop1: detected capacity change from 0 to 512 [ 30.988054][ T3562] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 31.008649][ T3562] loop1: detected capacity change from 0 to 1024 [ 31.015835][ T3562] EXT4-fs: Ignoring removed orlov option [ 31.021514][ T3562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.051343][ T3566] loop0: detected capacity change from 0 to 1024 [ 31.062374][ T3566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.075632][ T3566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 31.083859][ T3566] System zones: 0-1, 3-36 [ 31.090182][ T3566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.144484][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.531818][ T3577] bridge0: port 3(vlan2) entered blocking state [ 31.538510][ T3577] bridge0: port 3(vlan2) entered disabled state [ 31.545083][ T3577] vlan2: entered allmulticast mode [ 31.546491][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.561999][ T3577] vlan2: left allmulticast mode [ 31.570687][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.589030][ T3579] loop0: detected capacity change from 0 to 256 [ 31.603549][ T3579] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 31.611687][ T3579] FAT-fs (loop0): Filesystem has been set read-only [ 31.654161][ T3268] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 31.703906][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 31.830491][ T3611] loop1: detected capacity change from 0 to 512 [ 31.845651][ T3611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.858542][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 31.858553][ T29] audit: type=1400 audit(1727929746.807:645): avc: denied { mount } for pid=3609 comm="syz.1.45" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.858761][ T3611] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.890628][ T29] audit: type=1326 audit(1727929746.837:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7b9dff9 code=0x7ffc0000 [ 31.943634][ T3611] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.45: corrupted inode contents [ 31.967359][ T29] audit: type=1400 audit(1727929746.887:647): avc: denied { write } for pid=3609 comm="syz.1.45" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.988796][ T29] audit: type=1400 audit(1727929746.887:648): avc: denied { add_name } for pid=3609 comm="syz.1.45" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.995390][ T3611] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.45: mark_inode_dirty error [ 32.009130][ T29] audit: type=1400 audit(1727929746.887:649): avc: denied { create } for pid=3609 comm="syz.1.45" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.022136][ T3611] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.45: corrupted inode contents [ 32.040108][ T29] audit: type=1400 audit(1727929746.887:650): avc: denied { write open } for pid=3609 comm="syz.1.45" path="/14/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.040262][ T29] audit: type=1400 audit(1727929746.887:651): avc: denied { setattr } for pid=3609 comm="syz.1.45" path="/14/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.055185][ T3611] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.45: mark_inode_dirty error [ 32.074828][ T29] audit: type=1400 audit(1727929746.887:653): avc: denied { ioctl } for pid=3609 comm="syz.1.45" path="/14/file0/bus" dev="loop1" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.101303][ T3611] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.45: mark inode dirty (error -117) [ 32.108924][ T29] audit: type=1326 audit(1727929746.887:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7b9dff9 code=0x7ffc0000 [ 32.134322][ T3611] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 32.145311][ T29] audit: type=1326 audit(1727929746.907:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b7b9dff9 code=0x7ffc0000 [ 32.443097][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.466166][ T3622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 32.483009][ T3624] ALSA: seq fatal error: cannot create timer (-22) [ 32.569147][ T3630] bridge0: entered allmulticast mode [ 32.575305][ T3630] netlink: 116 bytes leftover after parsing attributes in process `syz.0.50'. [ 32.584899][ T3630] team0: left allmulticast mode [ 32.589856][ T3630] team_slave_0: left allmulticast mode [ 32.595575][ T3630] team_slave_1: left allmulticast mode [ 32.601086][ T3630] team0: left promiscuous mode [ 32.605888][ T3630] team_slave_0: left promiscuous mode [ 32.611323][ T3630] team_slave_1: left promiscuous mode [ 32.617086][ T3630] bridge0: port 3(team0) entered disabled state [ 32.626695][ T3630] bridge_slave_1: left allmulticast mode [ 32.632413][ T3630] bridge_slave_1: left promiscuous mode [ 32.638142][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.651046][ T3630] bridge_slave_0: left allmulticast mode [ 32.656824][ T3630] bridge_slave_0: left promiscuous mode [ 32.662441][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.673188][ T3638] loop4: detected capacity change from 0 to 2048 [ 32.679854][ T3630] bridge0 (unregistering): left allmulticast mode [ 32.715241][ T3638] Alternate GPT is invalid, using primary GPT. [ 32.721594][ T3638] loop4: p1 p2 p3 [ 32.733030][ T2966] Alternate GPT is invalid, using primary GPT. [ 32.739407][ T2966] loop4: p1 p2 p3 [ 32.755353][ T3634] can0: slcan on pts0. [ 32.770815][ T3460] udevd[3460]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 32.772236][ T3255] udevd[3255]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.794412][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 32.858784][ T3646] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 32.943884][ T3652] loop0: detected capacity change from 0 to 256 [ 32.971563][ T3661] netlink: 'syz.3.56': attribute type 13 has an invalid length. [ 32.971582][ T3661] netlink: 'syz.3.56': attribute type 27 has an invalid length. [ 33.334181][ T3624] can0 (unregistered): slcan off pts0. [ 33.383840][ T3689] loop1: detected capacity change from 0 to 512 [ 33.391736][ T3692] loop3: detected capacity change from 0 to 512 [ 33.406151][ T3689] EXT4-fs: Ignoring removed i_version option [ 33.419363][ T3692] EXT4-fs: Ignoring removed orlov option [ 33.421911][ T3689] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.438104][ T3689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.445713][ T3692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.476266][ T3689] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.499563][ T3689] EXT4-fs (loop1): 1 truncate cleaned up [ 33.516355][ T3692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.536844][ T3689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.564713][ T3692] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.933905][ T3708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.61: bg 0: block 255: padding at end of block bitmap is not set [ 33.962837][ T3714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.021882][ T3708] EXT4-fs (loop3): Remounting filesystem read-only [ 34.078501][ T3714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.176950][ T3714] team0: Port device netdevsim1 removed [ 34.190407][ T3721] loop0: detected capacity change from 0 to 512 [ 34.192590][ T3714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.242112][ T3721] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.272924][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.309833][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.310858][ T3725] loop3: detected capacity change from 0 to 512 [ 34.328592][ T3714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.339892][ T3725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.373762][ T3725] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 34.373779][ T3725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 34.373902][ T3725] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 34.373917][ T3725] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 34.374282][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.387891][ T3714] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.391825][ T3714] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.393504][ T3725] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.67: dx entry: limit 65535 != root limit 120 [ 34.393545][ T3725] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.67: Corrupt directory, running e2fsck is recommended [ 34.393580][ T3725] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.67: path /12/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 34.405421][ T3714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.415058][ T3727] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.424731][ T3714] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.524073][ C0] hrtimer: interrupt took 17981 ns [ 34.544367][ T3721] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.66: iget: bad i_size value: -6917529027641081756 [ 34.574342][ T3721] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.66: couldn't read orphan inode 17 (err -117) [ 34.602513][ T3721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.770574][ T3721] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.66: bg 0: block 65: padding at end of block bitmap is not set [ 34.803916][ T3738] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 34.813290][ T3721] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.66: Failed to acquire dquot type 0 [ 34.902134][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.025446][ T3767] loop4: detected capacity change from 0 to 512 [ 35.032924][ T3767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.048132][ T3767] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.76: bg 0: block 264: padding at end of block bitmap is not set [ 35.069614][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.087421][ T3767] EXT4-fs (loop4): Remounting filesystem read-only [ 35.095280][ T3767] EXT4-fs (loop4): 1 truncate cleaned up [ 35.113255][ T3767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.129745][ T3767] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 35.136400][ T3777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 35.142910][ T3777] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 35.150706][ T3777] vhci_hcd vhci_hcd.0: Device attached [ 35.167063][ T3767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.194426][ T3777] 9p: Unknown access argument 18446744073709551615: -34 [ 35.199559][ T3765] loop0: detected capacity change from 0 to 256 [ 35.225818][ T3765] FAT-fs (loop0): Directory bread(block 64) failed [ 35.232613][ T3765] FAT-fs (loop0): Directory bread(block 65) failed [ 35.246108][ T3765] FAT-fs (loop0): Directory bread(block 66) failed [ 35.252763][ T3765] FAT-fs (loop0): Directory bread(block 67) failed [ 35.259733][ T3765] FAT-fs (loop0): Directory bread(block 68) failed [ 35.260547][ T3785] vhci_hcd: connection closed [ 35.266485][ T3765] FAT-fs (loop0): Directory bread(block 69) failed [ 35.266937][ T40] vhci_hcd: stop threads [ 35.271242][ T3765] FAT-fs (loop0): Directory bread(block 70) failed [ 35.277766][ T40] vhci_hcd: release socket [ 35.286311][ T3765] FAT-fs (loop0): Directory bread(block 71) failed [ 35.288519][ T40] vhci_hcd: disconnect device [ 35.306487][ T3794] loop4: detected capacity change from 0 to 512 [ 35.307078][ T3765] FAT-fs (loop0): Directory bread(block 72) failed [ 35.320500][ T3765] FAT-fs (loop0): Directory bread(block 73) failed [ 35.338725][ T3794] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.349999][ T3794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 35.360006][ T3794] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.367060][ T3794] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.79: bg 0: block 361: padding at end of block bitmap is not set [ 35.382809][ T3794] EXT4-fs (loop4): Remounting filesystem read-only [ 35.389726][ T3794] EXT4-fs (loop4): 1 truncate cleaned up [ 35.399075][ T3794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.411419][ T3794] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 35.422984][ T3797] loop0: detected capacity change from 0 to 512 [ 35.429761][ T3794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.439663][ T3797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.451128][ T3797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 35.459665][ T3797] System zones: 1-12 [ 35.465403][ T3797] EXT4-fs (loop0): 1 truncate cleaned up [ 35.471460][ T3797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.495440][ T3793] sctp: [Deprecated]: syz.4.79 (pid 3793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 35.495440][ T3793] Use struct sctp_sack_info instead [ 35.534601][ T3797] loop0: detected capacity change from 512 to 64 [ 35.545031][ T3802] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=15 [ 35.554368][ T3802] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=15 [ 35.563652][ T3802] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 35.636286][ T3801] loop4: detected capacity change from 0 to 128 [ 35.661054][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.675858][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.693367][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.709751][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.734917][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.749628][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.763823][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.780478][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 35.795765][ T3268] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 36.050370][ T3813] loop2: detected capacity change from 0 to 512 [ 36.061414][ T3811] loop3: detected capacity change from 0 to 2048 [ 36.071715][ T3813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.080362][ T3813] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 36.135887][ T3811] loop3: p1 < > p4 [ 36.141241][ T3811] loop3: p4 size 8388608 extends beyond EOD, truncated [ 36.208882][ T3811] mmap: syz.3.84 (3811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.255291][ T3255] udevd[3255]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 36.289996][ T3822] ipt_REJECT: TCP_RESET invalid for non-tcp [ 36.315938][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.330280][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.341502][ T3825] loop3: detected capacity change from 0 to 128 [ 36.388482][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.431617][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.479831][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.651163][ T3848] loop4: detected capacity change from 0 to 512 [ 36.659370][ T3851] syz.1.97 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.718376][ T3848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.749784][ T3854] loop1: detected capacity change from 0 to 1024 [ 36.763759][ T3848] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.800356][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.812951][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.823785][ T3854] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.849949][ T3854] hub 2-0:1.0: USB hub found [ 36.851549][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.882199][ T29] kauditd_printk_skb: 822 callbacks suppressed [ 36.882211][ T29] audit: type=1400 audit(1727929751.827:1473): avc: denied { append } for pid=3847 comm="syz.4.96" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.912642][ T3873] Process accounting resumed [ 36.915025][ T3854] hub 2-0:1.0: 8 ports detected [ 36.936926][ T40] bond0 (unregistering): Released all slaves [ 36.951645][ T3873] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 36.976339][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.986615][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.023292][ T3831] chnl_net:caif_netlink_parms(): no params data found [ 37.050500][ T29] audit: type=1400 audit(1727929751.997:1474): avc: denied { write } for pid=3880 comm="+}[@" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.119430][ T3881] loop2: detected capacity change from 0 to 2048 [ 37.253373][ T3901] loop3: detected capacity change from 0 to 512 [ 37.263165][ T3901] EXT4-fs (loop3): blocks per group (33) and clusters per group (32768) inconsistent [ 37.340242][ T3881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.357526][ T29] audit: type=1400 audit(1727929752.307:1475): avc: denied { connect } for pid=3887 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.440894][ T3881] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.467883][ T3881] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 37.480298][ T3881] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.480298][ T3881] [ 37.490060][ T3881] EXT4-fs (loop2): Total free blocks count 0 [ 37.496132][ T3881] EXT4-fs (loop2): Free/Dirty block details [ 37.502076][ T3881] EXT4-fs (loop2): free_blocks=2415919104 [ 37.507818][ T3881] EXT4-fs (loop2): dirty_blocks=16 [ 37.512928][ T3881] EXT4-fs (loop2): Block reservation details [ 37.518942][ T3881] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 37.538515][ T40] hsr_slave_0: left promiscuous mode [ 37.551159][ T40] hsr_slave_1: left promiscuous mode [ 37.557400][ T29] audit: type=1400 audit(1727929752.497:1476): avc: denied { ioctl } for pid=3922 comm="syz.4.105" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.583285][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.583405][ T3923] loop4: detected capacity change from 0 to 1024 [ 37.590717][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.605130][ T3923] EXT4-fs: Ignoring removed orlov option [ 37.610807][ T3923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.619403][ T29] audit: type=1400 audit(1727929752.567:1477): avc: denied { read } for pid=3920 comm="syz.1.104" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.642470][ T29] audit: type=1400 audit(1727929752.567:1478): avc: denied { open } for pid=3920 comm="syz.1.104" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.666087][ T29] audit: type=1400 audit(1727929752.567:1479): avc: denied { ioctl } for pid=3920 comm="syz.1.104" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.668742][ T3923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 37.693975][ T40] veth1_macvtap: left promiscuous mode [ 37.700417][ T3923] System zones: [ 37.704558][ T40] veth0_macvtap: left promiscuous mode [ 37.704669][ T40] veth1_vlan: left promiscuous mode [ 37.708751][ T3923] 0-1 [ 37.714290][ T40] veth0_vlan: left promiscuous mode [ 37.719358][ T3923] , 3-36 [ 37.728162][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.730964][ T3923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.814212][ T29] audit: type=1400 audit(1727929752.747:1480): avc: denied { bind } for pid=3926 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.874153][ T29] audit: type=1326 audit(1727929752.787:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7b9dff9 code=0x7ffc0000 [ 37.897653][ T29] audit: type=1326 audit(1727929752.787:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7b9dff9 code=0x7ffc0000 [ 37.984403][ T40] team0 (unregistering): Port device team_slave_1 removed [ 37.995463][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.035593][ T3900] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 38.042923][ T3921] IPv6: Can't replace route, no match found [ 38.061190][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.068422][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.087275][ T3831] bridge_slave_0: entered allmulticast mode [ 38.094315][ T3831] bridge_slave_0: entered promiscuous mode [ 38.106690][ T3928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.106'. [ 38.122370][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.129474][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.137065][ T3831] bridge_slave_1: entered allmulticast mode [ 38.143530][ T3831] bridge_slave_1: entered promiscuous mode [ 38.168546][ T3831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.205171][ T3831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.261130][ T3943] loop2: detected capacity change from 0 to 512 [ 38.310238][ T3943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.320627][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.347870][ T3943] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.355559][ T3831] team0: Port device team_slave_0 added [ 38.362145][ T3831] team0: Port device team_slave_1 added [ 38.381267][ T3957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 38.393013][ T3943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.110: bg 0: block 248: padding at end of block bitmap is not set [ 38.424228][ T3943] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.110: Failed to acquire dquot type 1 [ 38.447993][ T3831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.454984][ T3831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.481020][ T3831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.492946][ T3831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.499966][ T3831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.525876][ T3831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.594223][ T3943] EXT4-fs (loop2): 1 truncate cleaned up [ 38.602611][ T3943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.652768][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 38.679834][ T3831] hsr_slave_0: entered promiscuous mode [ 38.693073][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.702995][ T3831] hsr_slave_1: entered promiscuous mode [ 38.710018][ T3831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.741595][ T3831] Cannot create hsr debugfs directory [ 38.839423][ T3977] netlink: 'syz.2.113': attribute type 33 has an invalid length. [ 38.847234][ T3977] netlink: 152 bytes leftover after parsing attributes in process `syz.2.113'. [ 38.929150][ T3984] dvmrp0: entered allmulticast mode [ 38.965484][ T3984] dvmrp0: left allmulticast mode [ 39.018033][ T3986] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 39.181342][ T3998] loop2: detected capacity change from 0 to 512 [ 39.207804][ T3998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.349109][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.381692][ T3998] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.428560][ T4013] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 39.439647][ T4018] syz.4.117[4018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.439828][ T4018] syz.4.117[4018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.451325][ T4018] syz.4.117[4018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.467407][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 39.612623][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.631384][ T3831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.682009][ T3831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.715991][ T3831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.727633][ T3831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.820877][ T4033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.839505][ T4033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.881785][ T3831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.934597][ T3831] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.946914][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.954129][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.977149][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.984233][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.395596][ T4052] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 40.660962][ T4067] loop1: detected capacity change from 0 to 2048 [ 40.689233][ T4067] EXT4-fs: Ignoring removed bh option [ 40.694711][ T4067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.703132][ T3831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.713610][ T3831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.724530][ T4067] EXT4-fs: Ignoring removed nobh option [ 40.823984][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.847726][ T4067] program syz.1.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.925104][ T4067] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.124: Abort forced by user [ 40.942318][ T3831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.950824][ T4067] EXT4-fs (loop1): Remounting filesystem read-only [ 40.960846][ T4067] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 40.961522][ T4067] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 40.961542][ T4067] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 41.000838][ T4106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 41.007507][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 41.015254][ T4106] vhci_hcd vhci_hcd.0: Device attached [ 41.023611][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.064894][ T3831] veth0_vlan: entered promiscuous mode [ 41.078563][ T3831] veth1_vlan: entered promiscuous mode [ 41.098360][ T3831] veth0_macvtap: entered promiscuous mode [ 41.106508][ T3831] veth1_macvtap: entered promiscuous mode [ 41.118234][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.128752][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.138687][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.149129][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.159000][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.169432][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.179309][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.189828][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.205506][ T3831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.218101][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.228577][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.238615][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.249307][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.259127][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.269623][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.279476][ T3831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.290035][ T3831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.302102][ T3831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.314034][ T3831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.322856][ T3831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.331672][ T3831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.340468][ T3831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.354189][ T4069] usb 10-1: SetAddress Request (2) to port 0 [ 41.360254][ T4069] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 41.719269][ T4167] loop3: detected capacity change from 0 to 512 [ 41.740582][ T4167] EXT4-fs: Ignoring removed oldalloc option [ 41.785303][ T4169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.131'. [ 41.835456][ T4167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.132: Parent and EA inode have the same ino 15 [ 41.851235][ T4167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.132: Parent and EA inode have the same ino 15 [ 41.896707][ T4167] EXT4-fs (loop3): 1 orphan inode deleted [ 41.918528][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.932892][ T4109] vhci_hcd: connection reset by peer [ 41.945177][ T40] vhci_hcd: stop threads [ 41.949439][ T40] vhci_hcd: release socket [ 41.953868][ T40] vhci_hcd: disconnect device [ 41.997388][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 41.997453][ T29] audit: type=1400 audit(1727929756.947:1568): avc: denied { create } for pid=4166 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.014759][ T4167] lo speed is unknown, defaulting to 1000 [ 42.025158][ T29] audit: type=1400 audit(1727929756.947:1569): avc: denied { write } for pid=4166 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.040943][ T4167] lo speed is unknown, defaulting to 1000 [ 42.058113][ T4185] loop0: detected capacity change from 0 to 164 [ 42.074813][ T4185] rock: directory entry would overflow storage [ 42.081210][ T4185] rock: sig=0x4f50, size=4, remaining=3 [ 42.081247][ T29] audit: type=1400 audit(1727929757.017:1570): avc: denied { mount } for pid=4184 comm="syz.0.134" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.086795][ T4185] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.109410][ T4167] lo speed is unknown, defaulting to 1000 [ 42.134735][ T4167] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.137089][ T29] audit: type=1400 audit(1727929757.087:1571): avc: denied { unmount } for pid=3831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.142466][ T4167] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.183014][ T4167] lo speed is unknown, defaulting to 1000 [ 42.192795][ T4167] lo speed is unknown, defaulting to 1000 [ 42.196426][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 42.199395][ T4167] lo speed is unknown, defaulting to 1000 [ 42.211267][ T4167] lo speed is unknown, defaulting to 1000 [ 42.222606][ T29] audit: type=1400 audit(1727929757.167:1572): avc: denied { execute } for pid=4191 comm="syz.0.136" name="file1" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.223987][ T4167] lo speed is unknown, defaulting to 1000 [ 42.260682][ T29] audit: type=1400 audit(1727929757.207:1573): avc: denied { execute_no_trans } for pid=4191 comm="syz.0.136" path="/4/file1" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.326900][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 42.335760][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 42.337673][ T29] audit: type=1400 audit(1727929757.267:1574): avc: denied { read } for pid=4191 comm="syz.0.136" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.369013][ T29] audit: type=1400 audit(1727929757.267:1575): avc: denied { open } for pid=4191 comm="syz.0.136" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.400431][ T29] audit: type=1400 audit(1727929757.347:1576): avc: denied { ioctl } for pid=4191 comm="syz.0.136" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.438725][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.538429][ T29] audit: type=1400 audit(1727929757.487:1577): avc: denied { sqpoll } for pid=4200 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.576516][ T4201] loop3: detected capacity change from 0 to 2048 [ 42.628524][ T4205] loop1: detected capacity change from 0 to 1024 [ 42.635313][ T4205] EXT4-fs: Ignoring removed bh option [ 42.741478][ T4205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.770890][ T4205] lo speed is unknown, defaulting to 1000 [ 42.996223][ T4215] loop2: detected capacity change from 0 to 1024 [ 43.032086][ T4215] loop2: detected capacity change from 0 to 256 [ 43.039459][ T4218] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.141'. [ 43.049353][ T4211] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.141'. [ 43.276889][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.298588][ T4228] loop1: detected capacity change from 0 to 512 [ 43.316073][ T4228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.328745][ T4228] ext4 filesystem being mounted at /34/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.399747][ T4235] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 43.428005][ T4236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.997282][ T4256] loop4: detected capacity change from 0 to 164 [ 44.005268][ T4256] rock: directory entry would overflow storage [ 44.011460][ T4256] rock: sig=0x5245, size=8, remaining=3 [ 44.091385][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 44.113477][ T4262] dvmrp0: entered allmulticast mode [ 44.136260][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.161413][ T4264] loop1: detected capacity change from 0 to 256 [ 44.173172][ T4264] vfat: Unknown parameter '0000000000000000000000318446744073709551615' [ 44.190985][ T4266] 9pnet_fd: Insufficient options for proto=fd [ 44.191057][ T4264] x_tables: unsorted underflow at hook 3 [ 44.227305][ T4266] loop4: detected capacity change from 0 to 2048 [ 44.247199][ T4268] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 44.267017][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.340000][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.411550][ T4275] lo speed is unknown, defaulting to 1000 [ 44.486869][ T4276] syz.1.161[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.486932][ T4276] syz.1.161[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.498289][ T4276] syz.1.161[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.525382][ T4276] lo speed is unknown, defaulting to 1000 [ 44.625092][ T4276] loop1: detected capacity change from 0 to 1024 [ 44.631945][ T4276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.641434][ T4276] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.695669][ T4276] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.704682][ T4276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.724768][ T4276] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615' [ 44.852940][ T4283] syz.2.164[4283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.853175][ T4283] syz.2.164[4283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.905586][ T4283] syz.2.164[4283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.439292][ T4292] loop3: detected capacity change from 0 to 512 [ 45.964893][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.178900][ T4292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.252716][ T4292] EXT4-fs (loop3): 1 orphan inode deleted [ 46.258648][ T4292] EXT4-fs (loop3): 1 truncate cleaned up [ 46.264857][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.280624][ T4296] netlink: 9 bytes leftover after parsing attributes in process `syz.1.168'. [ 46.280787][ T4292] EXT4-fs error (device loop3): empty_inline_dir:1850: inode #12: block 7: comm syz.3.167: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 46.312149][ T4292] EXT4-fs (loop3): Remounting filesystem read-only [ 46.318788][ T4292] EXT4-fs warning (device loop3): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 46.344160][ T4296] gretap0: entered promiscuous mode [ 46.359910][ T4296] netlink: 5 bytes leftover after parsing attributes in process `syz.1.168'. [ 46.371201][ T4296] 0ªX¹¦D: renamed from gretap0 [ 46.381592][ T4296] 0ªX¹¦D: left promiscuous mode [ 46.386581][ T4296] 0ªX¹¦D: entered allmulticast mode [ 46.393616][ T4296] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 46.410418][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.420636][ T4300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 46.449515][ T4069] usb 10-1: device descriptor read/8, error -110 [ 46.472015][ T4312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.171'. [ 46.490832][ T4309] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 46.564300][ T4069] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 46.577195][ T4321] loop3: detected capacity change from 0 to 512 [ 46.578497][ T4319] loop4: detected capacity change from 0 to 2048 [ 46.589947][ T4069] usb 10-1: enqueue for inactive port 0 [ 46.590346][ T4321] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.176: corrupted in-inode xattr: invalid ea_ino [ 46.599118][ T4069] usb 10-1: enqueue for inactive port 0 [ 46.609924][ T4321] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.176: couldn't read orphan inode 15 (err -117) [ 46.619405][ T4326] loop2: detected capacity change from 0 to 512 [ 46.628116][ T4321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.669399][ T4069] usb 10-1: enqueue for inactive port 0 [ 46.676443][ T4319] Alternate GPT is invalid, using primary GPT. [ 46.682779][ T4319] loop4: p1 p2 p3 [ 46.689756][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.699756][ T4326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.719945][ T4314] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 46.719945][ T4314] program syz.4.174 not setting count and/or reply_len properly [ 46.731690][ T4326] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.770947][ T4326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.016617][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 47.016631][ T29] audit: type=1400 audit(1727929761.907:2151): avc: denied { remove_name } for pid=4358 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.046465][ T29] audit: type=1400 audit(1727929761.907:2152): avc: denied { unlink } for pid=4358 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.086657][ T4361] lo speed is unknown, defaulting to 1000 [ 47.333219][ T29] audit: type=1400 audit(1727929762.277:2153): avc: denied { map } for pid=4352 comm="syz.0.181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.357317][ T29] audit: type=1400 audit(1727929762.277:2154): avc: denied { read write } for pid=4352 comm="syz.0.181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.403125][ T29] audit: type=1400 audit(1727929762.347:2155): avc: denied { create } for pid=4352 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.428053][ T4367] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 47.446111][ T4371] tipc: Started in network mode [ 47.450992][ T4371] tipc: Node identity f7, cluster identity 4711 [ 47.457286][ T4371] tipc: Node number set to 247 [ 47.462520][ T29] audit: type=1326 audit(1727929762.397:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca108dff9 code=0x7ffc0000 [ 47.485855][ T29] audit: type=1326 audit(1727929762.397:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca108dff9 code=0x7ffc0000 [ 47.488361][ T4367] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 47.509270][ T29] audit: type=1326 audit(1727929762.397:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca108dff9 code=0x7ffc0000 [ 47.532735][ T4377] netlink: 'syz.2.184': attribute type 39 has an invalid length. [ 47.542339][ T29] audit: type=1326 audit(1727929762.397:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca108dff9 code=0x7ffc0000 [ 47.573384][ T29] audit: type=1326 audit(1727929762.397:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca108dff9 code=0x7ffc0000 [ 47.771420][ T4386] loop4: detected capacity change from 0 to 4096 [ 47.798289][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.814392][ T4069] usb usb10-port1: attempt power cycle [ 47.854738][ T4388] loop2: detected capacity change from 0 to 2048 [ 47.885628][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 47.895801][ T4388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.912359][ T4394] loop3: detected capacity change from 0 to 256 [ 48.002988][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.025961][ T4401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'. [ 48.147218][ T4407] veth0_vlan: entered allmulticast mode [ 48.530498][ T4409] netlink: 'syz.3.193': attribute type 10 has an invalid length. [ 48.538626][ T4409] veth0_macvtap: left promiscuous mode [ 48.549049][ T4409] veth0_macvtap: entered promiscuous mode [ 48.562370][ T4409] team0: Device macvtap0 failed to register rx_handler [ 48.573925][ T4409] veth0_macvtap: left promiscuous mode [ 48.603438][ T4415] lo speed is unknown, defaulting to 1000 [ 48.718184][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.749599][ T4417] loop1: detected capacity change from 0 to 512 [ 48.826422][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.862331][ T4417] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.896819][ T4426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.913151][ T4426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.926860][ T4428] loop3: detected capacity change from 0 to 512 [ 48.943069][ T4428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.951455][ T4430] syzkaller0: entered allmulticast mode [ 48.951593][ T4428] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 49.045509][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.093138][ T4434] tipc: Started in network mode [ 49.098079][ T4434] tipc: Node identity f7, cluster identity 4711 [ 49.104417][ T4434] tipc: Node number set to 247 [ 49.114089][ T4428] lo speed is unknown, defaulting to 1000 [ 49.134918][ T4439] lo speed is unknown, defaulting to 1000 [ 49.204287][ T4444] loop1: detected capacity change from 0 to 2048 [ 49.265017][ T4444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.283284][ T4450] loop2: detected capacity change from 0 to 512 [ 49.298569][ T4450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.312051][ T4452] veth0_vlan: entered allmulticast mode [ 49.337684][ T4450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 49.345765][ T4450] System zones: 1-12 [ 49.359305][ T4450] EXT4-fs (loop2): 1 truncate cleaned up [ 49.374479][ T4450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.401813][ T4444] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 49.410081][ T4444] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 49.464221][ T4450] loop2: detected capacity change from 512 to 64 [ 49.477837][ T4456] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop2 ino=15 [ 49.487203][ T4456] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop2 ino=15 [ 49.497625][ T4456] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -12) [ 49.523228][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.612498][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.627441][ T4462] loop1: detected capacity change from 0 to 4096 [ 49.642243][ T4462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.644318][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.668621][ T4069] usb usb10-port1: unable to enumerate USB device [ 49.680779][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.696629][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.710324][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.724432][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.754594][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.780494][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.820802][ T3269] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 49.943997][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 50.039587][ T4469] loop4: detected capacity change from 0 to 256 [ 50.105281][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.115787][ T157] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.176424][ T157] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.228479][ T157] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.296568][ T157] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.398169][ T157] bridge_slave_1: left allmulticast mode [ 50.404049][ T157] bridge_slave_1: left promiscuous mode [ 50.409714][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.437453][ T157] bridge_slave_0: left allmulticast mode [ 50.443167][ T157] bridge_slave_0: left promiscuous mode [ 50.449041][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.457774][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.586775][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.597369][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.609102][ T157] bond0 (unregistering): Released all slaves [ 50.617752][ T4472] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 50.625770][ T4472] veth0_macvtap: left promiscuous mode [ 50.640734][ T4472] veth0_macvtap: entered promiscuous mode [ 50.648733][ T4472] team0: Device macvtap0 failed to register rx_handler [ 50.656216][ T4472] veth0_macvtap: left promiscuous mode [ 50.667011][ T4485] tipc: Started in network mode [ 50.671903][ T4485] tipc: Node identity f7, cluster identity 4711 [ 50.678177][ T4485] tipc: Node number set to 247 [ 50.689784][ T4474] lo speed is unknown, defaulting to 1000 [ 50.697767][ T4491] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 50.705980][ T4491] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 50.767071][ T4500] loop4: detected capacity change from 0 to 512 [ 50.775345][ T4500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.783922][ T4500] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 50.796528][ T157] hsr_slave_0: left promiscuous mode [ 50.840005][ T157] hsr_slave_1: left promiscuous mode [ 50.849062][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.856531][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.864697][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.872121][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.881948][ T157] veth1_macvtap: left promiscuous mode [ 50.887572][ T157] veth0_macvtap: left promiscuous mode [ 50.893161][ T157] veth1_vlan: left promiscuous mode [ 51.257122][ T157] team0 (unregistering): Port device team_slave_1 removed [ 51.298406][ T157] team0 (unregistering): Port device team_slave_0 removed [ 51.426845][ T4498] veth0_vlan: entered allmulticast mode [ 51.520239][ T4517] lo speed is unknown, defaulting to 1000 [ 51.535758][ T4518] lo speed is unknown, defaulting to 1000 [ 51.546372][ T4500] lo speed is unknown, defaulting to 1000 [ 51.665228][ T4529] syzkaller0: entered allmulticast mode [ 51.678291][ T4526] loop1: detected capacity change from 0 to 512 [ 51.702333][ T4526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.746242][ T4474] chnl_net:caif_netlink_parms(): no params data found [ 51.764390][ T4526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 51.772448][ T4526] System zones: 1-12 [ 51.784928][ T4530] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 51.804937][ T4526] EXT4-fs (loop1): 1 truncate cleaned up [ 51.810910][ T4526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.823546][ T4530] veth0_macvtap: left promiscuous mode [ 51.845164][ T4530] veth0_macvtap: entered promiscuous mode [ 51.856457][ T4530] team0: Device macvtap0 failed to register rx_handler [ 51.876541][ T4530] veth0_macvtap: left promiscuous mode [ 51.904170][ T4526] loop1: detected capacity change from 512 to 64 [ 51.918591][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 51.945085][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 51.964301][ T4526] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 52.024191][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 52.024205][ T29] audit: type=1326 audit(1727929766.977:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.026915][ T4559] loop4: detected capacity change from 0 to 512 [ 52.030602][ T29] audit: type=1326 audit(1727929766.977:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.083779][ T29] audit: type=1326 audit(1727929767.007:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.107256][ T29] audit: type=1326 audit(1727929767.007:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.131074][ T29] audit: type=1326 audit(1727929767.007:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.154270][ T29] audit: type=1326 audit(1727929767.007:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.177552][ T29] audit: type=1326 audit(1727929767.007:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.187207][ T4559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.200821][ T29] audit: type=1326 audit(1727929767.007:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.215213][ T4559] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.236437][ T29] audit: type=1326 audit(1727929767.007:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.236466][ T29] audit: type=1326 audit(1727929767.007:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 52.300190][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.307428][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.314749][ T4474] bridge_slave_0: entered allmulticast mode [ 52.321297][ T4474] bridge_slave_0: entered promiscuous mode [ 52.331977][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.338282][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.352406][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.363010][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.377158][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.386104][ T4474] bridge_slave_1: entered allmulticast mode [ 52.391411][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.399904][ T4474] bridge_slave_1: entered promiscuous mode [ 52.415234][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.420185][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.441497][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.461967][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.482010][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.511096][ T3262] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 52.587565][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.601632][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.613136][ T3553] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.643777][ T4474] team0: Port device team_slave_0 added [ 52.656570][ T4474] team0: Port device team_slave_1 added [ 52.676020][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.682979][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.708921][ T4474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.730878][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.737998][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.764111][ T4474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.831414][ T4474] hsr_slave_0: entered promiscuous mode [ 52.864260][ T4474] hsr_slave_1: entered promiscuous mode [ 52.873585][ T4474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.880703][ T4582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.226'. [ 52.889021][ T4474] Cannot create hsr debugfs directory [ 52.904432][ T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.009340][ T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.069047][ T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.118046][ T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.336700][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.347106][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.365956][ T157] bond0 (unregistering): Released all slaves [ 53.408687][ T157] tipc: Left network mode [ 53.422480][ T157] hsr_slave_0: left promiscuous mode [ 53.431865][ T157] hsr_slave_1: left promiscuous mode [ 53.438870][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.446310][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.454952][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.462464][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.489174][ T157] veth1_macvtap: left promiscuous mode [ 53.494838][ T157] veth0_macvtap: left promiscuous mode [ 53.500392][ T157] veth1_vlan: left promiscuous mode [ 53.585608][ T157] team0 (unregistering): Port device team_slave_1 removed [ 53.595392][ T157] team0 (unregistering): Port device team_slave_0 removed [ 53.628634][ T4474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.637157][ T4617] tipc: Started in network mode [ 53.642047][ T4617] tipc: Node identity f7, cluster identity 4711 [ 53.648428][ T4617] tipc: Node number set to 247 [ 53.659965][ T4474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.677369][ T4474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.706087][ T4474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.747095][ T4642] veth0_vlan: entered allmulticast mode [ 53.748830][ T4639] loop4: detected capacity change from 0 to 2048 [ 53.786013][ T4639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.917897][ T4639] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 53.921538][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.926135][ T4639] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 53.976224][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.995991][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.035492][ T4474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.046515][ T4474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.117746][ T4622] lo speed is unknown, defaulting to 1000 [ 54.142690][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.149782][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.231554][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.238679][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.267950][ T4675] lo speed is unknown, defaulting to 1000 [ 54.304433][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.403188][ T4622] chnl_net:caif_netlink_parms(): no params data found [ 54.434960][ T4474] veth0_vlan: entered promiscuous mode [ 54.457476][ T4474] veth1_vlan: entered promiscuous mode [ 54.485051][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.492154][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.499578][ T4622] bridge_slave_0: entered allmulticast mode [ 54.506127][ T4622] bridge_slave_0: entered promiscuous mode [ 54.513023][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.520173][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.527469][ T4622] bridge_slave_1: entered allmulticast mode [ 54.533883][ T4622] bridge_slave_1: entered promiscuous mode [ 54.557405][ T4622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.567956][ T4622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.577797][ T4474] veth0_macvtap: entered promiscuous mode [ 54.594755][ T4622] team0: Port device team_slave_0 added [ 54.601223][ T4622] team0: Port device team_slave_1 added [ 54.607937][ T4474] veth1_macvtap: entered promiscuous mode [ 54.626207][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.633615][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.659654][ T4622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.678542][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.685570][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.711807][ T4622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.737489][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.748033][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.757836][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.768359][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.778338][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.788807][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.800057][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.809765][ T4622] hsr_slave_0: entered promiscuous mode [ 54.825091][ T4622] hsr_slave_1: entered promiscuous mode [ 54.840085][ T4727] loop4: detected capacity change from 0 to 256 [ 54.851425][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.862020][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.871857][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.882359][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.892194][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.902658][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.911048][ T4730] loop3: detected capacity change from 0 to 512 [ 54.914421][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.945867][ T4726] lo speed is unknown, defaulting to 1000 [ 54.956263][ T4474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.965039][ T4474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.973910][ T4474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.982633][ T4474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.006411][ T4730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.006500][ T4730] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.084349][ T4731] lo speed is unknown, defaulting to 1000 [ 55.195002][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.257876][ T4756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.278736][ T4756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.359540][ T4787] netlink: 'syz.2.244': attribute type 12 has an invalid length. [ 56.378328][ T4784] lo speed is unknown, defaulting to 1000 [ 56.395482][ T4622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.432852][ T4622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.440422][ T4622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.450282][ T4622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.458296][ T4787] loop2: detected capacity change from 0 to 1024 [ 56.516310][ T4787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.536344][ T4787] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.555502][ T4622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.563972][ T4797] netlink: 'syz.0.247': attribute type 62 has an invalid length. [ 56.578367][ T4787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.584922][ T4622] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.598344][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.605560][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.617150][ T4787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.636155][ T4622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.646704][ T4622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.689924][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.695843][ T4815] loop3: detected capacity change from 0 to 256 [ 56.697081][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.713498][ T4819] loop4: detected capacity change from 0 to 512 [ 56.754550][ T4826] loop3: detected capacity change from 0 to 1024 [ 56.768065][ T4819] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.251: corrupted in-inode xattr: invalid ea_ino [ 56.775987][ T4826] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.792562][ T4826] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.806236][ T4826] JBD2: no valid journal superblock found [ 56.811989][ T4826] EXT4-fs (loop3): Could not load journal inode [ 56.826181][ T4819] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.251: couldn't read orphan inode 15 (err -117) [ 56.826952][ T4622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.861146][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.907627][ T4819] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.251: invalid indirect mapped block 234881024 (level 0) [ 57.055896][ T4622] veth0_vlan: entered promiscuous mode [ 57.063541][ T3266] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 57.079924][ T4622] veth1_vlan: entered promiscuous mode [ 57.105013][ T4622] veth0_macvtap: entered promiscuous mode [ 57.112389][ T4622] veth1_macvtap: entered promiscuous mode [ 57.116791][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 57.116803][ T29] audit: type=1400 audit(1727929772.067:2560): avc: denied { unlink } for pid=3266 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 57.125249][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.158048][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.167857][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.169498][ T3266] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 57.178273][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.178289][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.210044][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.210389][ T3266] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 57.219894][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.219909][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.270703][ T4474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.315000][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.332021][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.342545][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.352380][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.362817][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.367181][ T29] audit: type=1400 audit(1727929772.317:2561): avc: denied { read } for pid=4870 comm="syz.2.255" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.372702][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.372716][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.372805][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.404132][ T29] audit: type=1400 audit(1727929772.347:2562): avc: denied { open } for pid=4870 comm="syz.2.255" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.406354][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.422985][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.426702][ T29] audit: type=1400 audit(1727929772.347:2563): avc: denied { ioctl } for pid=4870 comm="syz.2.255" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.537137][ T29] audit: type=1400 audit(1727929772.407:2564): avc: denied { read write } for pid=4870 comm="syz.2.255" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.560610][ T29] audit: type=1400 audit(1727929772.407:2565): avc: denied { open } for pid=4870 comm="syz.2.255" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.587774][ T4871] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 57.601196][ T4622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.610066][ T4622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.618831][ T4622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.627567][ T4622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.641976][ T29] audit: type=1400 audit(1727929772.587:2566): avc: denied { mount } for pid=4885 comm="syz.3.256" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.642298][ T4891] devtmpfs: Too few inodes for current use [ 57.687019][ T29] audit: type=1400 audit(1727929772.587:2567): avc: denied { remount } for pid=4885 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.706932][ T29] audit: type=1400 audit(1727929772.627:2568): avc: denied { mounton } for pid=4885 comm="syz.3.256" path="/54/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 57.729697][ T29] audit: type=1400 audit(1727929772.627:2569): avc: denied { mount } for pid=4885 comm="syz.3.256" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.773172][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.787235][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.831066][ T4904] can0: slcan on pts0. [ 57.863437][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.884269][ T4904] can0 (unregistered): slcan off pts0. [ 57.927545][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.938989][ T4910] loop1: detected capacity change from 0 to 1024 [ 57.954158][ T4910] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 57.982010][ T4910] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.983420][ T4911] lo speed is unknown, defaulting to 1000 [ 57.992270][ T4910] EXT4-fs (loop1): invalid journal inode [ 58.001523][ T4908] lo speed is unknown, defaulting to 1000 [ 58.004420][ T4910] EXT4-fs (loop1): can't get journal size [ 58.017263][ T4910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.018087][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.089547][ T4622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.222638][ T50] bridge_slave_1: left allmulticast mode [ 58.228356][ T50] bridge_slave_1: left promiscuous mode [ 58.234180][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.272229][ T50] bridge_slave_0: left allmulticast mode [ 58.277929][ T50] bridge_slave_0: left promiscuous mode [ 58.283620][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.311434][ T4951] loop2: detected capacity change from 0 to 1024 [ 58.324667][ T4955] loop1: detected capacity change from 0 to 1024 [ 58.347074][ T4955] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.388297][ T4955] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.266: Invalid block bitmap block 0 in block_group 0 [ 58.418685][ T4955] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.266: Failed to acquire dquot type 0 [ 58.434934][ T4955] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.266: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.442965][ T50] dvmrp0 (unregistering): left allmulticast mode [ 58.455758][ T4970] netlink: 184 bytes leftover after parsing attributes in process `syz.2.269'. [ 58.465183][ T4955] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.266: Invalid inode bitmap blk 0 in block_group 0 [ 58.479115][ T4955] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 58.487693][ T3293] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 0 [ 58.500353][ T4955] EXT4-fs (loop1): 1 orphan inode deleted [ 58.506444][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.526203][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.538305][ T50] bond0 (unregistering): Released all slaves [ 58.552239][ T4911] chnl_net:caif_netlink_parms(): no params data found [ 58.603585][ T4908] chnl_net:caif_netlink_parms(): no params data found [ 58.613138][ T4978] loop1: detected capacity change from 0 to 256 [ 58.644878][ T50] tipc: Left network mode [ 58.653193][ T50] hsr_slave_0: left promiscuous mode [ 58.694167][ T50] hsr_slave_1: left promiscuous mode [ 58.723191][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.730753][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.739584][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.747082][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.767046][ T50] veth1_macvtap: left promiscuous mode [ 58.772645][ T50] veth1_vlan: left promiscuous mode [ 58.778041][ T50] veth0_vlan: left promiscuous mode [ 58.875807][ T50] team0 (unregistering): Port device team_slave_1 removed [ 58.887909][ T50] team0 (unregistering): Port device team_slave_0 removed [ 58.929936][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.942939][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.040319][ T4908] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.047477][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.060027][ T4908] bridge_slave_0: entered allmulticast mode [ 59.060439][ T4908] bridge_slave_0: entered promiscuous mode [ 59.065816][ T4908] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.065852][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.069276][ T4908] bridge_slave_1: entered allmulticast mode [ 59.069697][ T4908] bridge_slave_1: entered promiscuous mode [ 59.125402][ T4908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.136103][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.143277][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.160768][ T4911] bridge_slave_0: entered allmulticast mode [ 59.167378][ T4911] bridge_slave_0: entered promiscuous mode [ 59.175569][ T4908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.194316][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.201461][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.208981][ T4911] bridge_slave_1: entered allmulticast mode [ 59.215703][ T4911] bridge_slave_1: entered promiscuous mode [ 59.236349][ T4908] team0: Port device team_slave_0 added [ 59.250282][ T4911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.260365][ T4908] team0: Port device team_slave_1 added [ 59.275396][ T4911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.296634][ T4908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.303598][ T4908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.329656][ T4908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.349217][ T4911] team0: Port device team_slave_0 added [ 59.363854][ T4911] team0: Port device team_slave_1 added [ 59.391641][ T4908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.398857][ T4908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.425015][ T4908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.489825][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.496936][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.522873][ T4911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.538899][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.555699][ T5029] netlink: 168 bytes leftover after parsing attributes in process `syz.0.277'. [ 59.595830][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.602784][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.628857][ T4911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.675992][ T4908] hsr_slave_0: entered promiscuous mode [ 59.682531][ T4908] hsr_slave_1: entered promiscuous mode [ 59.688721][ T4908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.696322][ T4908] Cannot create hsr debugfs directory [ 59.705041][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.776690][ T5040] loop2: detected capacity change from 0 to 128 [ 59.847450][ T4911] hsr_slave_0: entered promiscuous mode [ 59.870220][ T4911] hsr_slave_1: entered promiscuous mode [ 59.892694][ T4911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.925067][ T4911] Cannot create hsr debugfs directory [ 59.943506][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.042197][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.218770][ T50] bridge_slave_1: left allmulticast mode [ 60.224507][ T50] bridge_slave_1: left promiscuous mode [ 60.230333][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.238742][ T50] bridge_slave_0: left allmulticast mode [ 60.244458][ T50] bridge_slave_0: left promiscuous mode [ 60.250192][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.441080][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.452189][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.467392][ T50] bond0 (unregistering): Released all slaves [ 60.473983][ T5059] loop1: detected capacity change from 0 to 2048 [ 60.474818][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.492433][ T50] bond1 (unregistering): Released all slaves [ 60.498970][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.545937][ T50] tipc: Left network mode [ 60.546762][ T5059] Alternate GPT is invalid, using primary GPT. [ 60.556696][ T5059] loop1: p1 p2 p3 [ 60.562902][ T50] hsr_slave_0: left promiscuous mode [ 60.569356][ T50] hsr_slave_1: left promiscuous mode [ 60.580288][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.587869][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.603167][ T2966] Alternate GPT is invalid, using primary GPT. [ 60.609622][ T2966] loop1: p1 p2 p3 [ 60.622356][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.629862][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.646912][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.659872][ T3460] udevd[3460]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 60.667041][ T5084] loop1: detected capacity change from 0 to 256 [ 60.674683][ T50] veth1_macvtap: left promiscuous mode [ 60.678870][ T3255] udevd[3255]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 60.681300][ T50] veth1_vlan: left promiscuous mode [ 60.714590][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.714843][ T3255] udevd[3255]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 60.727837][ T3460] udevd[3460]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 60.774351][ T5089] loop1: detected capacity change from 0 to 256 [ 60.827035][ T50] team0 (unregistering): Port device team_slave_1 removed [ 60.838440][ T50] team0 (unregistering): Port device team_slave_0 removed [ 60.879100][ T4438] lo speed is unknown, defaulting to 1000 [ 61.002007][ T5109] block device autoloading is deprecated and will be removed. [ 61.088612][ T5117] loop1: detected capacity change from 0 to 2048 [ 61.104134][ T4908] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.128883][ T5117] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.132277][ T4908] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.153957][ T5130] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 61.163768][ T4908] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.171676][ T5117] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 61.195354][ T4908] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.199648][ T5135] loop2: detected capacity change from 0 to 512 [ 61.240679][ T5135] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.252642][ T5135] tmpfs: Bad value for 'mpol' [ 61.259701][ T4908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.272863][ T4908] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.289552][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.296631][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.305531][ T5135] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 61.332172][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.339370][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.359895][ T5141] loop1: detected capacity change from 0 to 256 [ 61.395993][ T4911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.414325][ T4911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.426472][ T4911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.435859][ T5153] Invalid ELF header magic: != ELF [ 61.441147][ T5149] loop0: detected capacity change from 0 to 256 [ 61.459566][ T4911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.486101][ T4908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.496428][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.503905][ T5163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.530228][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.537795][ T5163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.584177][ T5176] Zero length message leads to an empty skb [ 61.609175][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.625662][ T4911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.635573][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.657979][ T4911] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.672858][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.679951][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.714709][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.721797][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.767665][ T4908] veth0_vlan: entered promiscuous mode [ 61.785765][ T4908] veth1_vlan: entered promiscuous mode [ 61.812914][ T4908] veth0_macvtap: entered promiscuous mode [ 61.836678][ T4908] veth1_macvtap: entered promiscuous mode [ 61.857549][ T4908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.868064][ T4908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.877994][ T4908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.888640][ T4908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.899549][ T4908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.908588][ T4911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.918625][ T4908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.929175][ T4908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.940472][ T4908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.945367][ T5229] loop2: detected capacity change from 0 to 164 [ 61.953192][ T4908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.962839][ T4908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.971659][ T4908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.980383][ T4908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.001297][ T5229] loop2: detected capacity change from 0 to 128 [ 62.032417][ T5229] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.236751][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 62.236767][ T29] audit: type=1326 audit(1727929777.187:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557e89dff9 code=0x7ffc0000 [ 62.354321][ T29] audit: type=1326 audit(1727929777.187:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557e89dff9 code=0x7ffc0000 [ 62.377831][ T29] audit: type=1400 audit(1727929777.227:3217): avc: denied { mounton } for pid=5247 comm="syz.4.261" path="/proc/2/task" dev="proc" ino=10129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 62.468535][ T4911] veth0_vlan: entered promiscuous mode [ 62.488824][ T4911] veth1_vlan: entered promiscuous mode [ 62.519125][ T29] audit: type=1326 audit(1727929777.467:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.525341][ T4911] veth0_macvtap: entered promiscuous mode [ 62.542515][ T29] audit: type=1326 audit(1727929777.467:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.558634][ T5287] loop1: detected capacity change from 0 to 256 [ 62.572943][ T29] audit: type=1326 audit(1727929777.467:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.601106][ T29] audit: type=1326 audit(1727929777.467:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.606768][ T4911] veth1_macvtap: entered promiscuous mode [ 62.624406][ T29] audit: type=1326 audit(1727929777.467:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.653496][ T29] audit: type=1326 audit(1727929777.467:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.676843][ T29] audit: type=1326 audit(1727929777.467:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bdcc5dff9 code=0x7ffc0000 [ 62.681089][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.710830][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.720646][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.731144][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.740947][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.751363][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.781162][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.796687][ T5292] loop1: detected capacity change from 0 to 256 [ 62.803836][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.814364][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.824270][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.835103][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.905077][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.924976][ T4911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.933758][ T4911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.942624][ T4911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.951352][ T4911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.978886][ T5309] loop0: detected capacity change from 0 to 1024 [ 63.001300][ T5309] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.012284][ T5309] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.054473][ T5309] JBD2: no valid journal superblock found [ 63.060223][ T5309] EXT4-fs (loop0): Could not load journal inode [ 63.087126][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.103949][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.186471][ T5327] loop4: detected capacity change from 0 to 512 [ 63.209161][ T5327] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.212947][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.243134][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.351605][ T5357] loop4: detected capacity change from 0 to 256 [ 64.396180][ T5361] loop3: detected capacity change from 0 to 256 [ 64.461643][ T5370] vhci_hcd: invalid port number 252 [ 64.466935][ T5370] vhci_hcd: invalid port number 252 [ 64.526770][ T5377] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.578074][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.608781][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.669227][ T5395] loop0: detected capacity change from 0 to 512 [ 64.712463][ T5395] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.729972][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.777075][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.802488][ T5407] loop1: detected capacity change from 0 to 256 [ 64.850439][ T5411] loop1: detected capacity change from 0 to 256 [ 65.252427][ T5422] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in; [ 65.252427][ T5422] program syz.1.337 not setting count and/or reply_len properly [ 65.271701][ T5422] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.337'. [ 65.396192][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.410052][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.563669][ T5438] loop3: detected capacity change from 0 to 256 [ 65.567285][ T3831] EXT4-fs unmount: 11 callbacks suppressed [ 65.567299][ T3831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.576383][ T5436] loop4: detected capacity change from 0 to 512 [ 65.606401][ T5436] EXT4-fs error (device loop4): __ext4_fill_super:5458: inode #2: comm syz.4.341: casefold flag without casefold feature [ 65.621547][ T5436] EXT4-fs (loop4): get root inode failed [ 65.627264][ T5436] EXT4-fs (loop4): mount failed [ 65.642971][ T5444] loop3: detected capacity change from 0 to 256 [ 65.732193][ T5452] loop3: detected capacity change from 0 to 2048 [ 65.741430][ T5450] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 65.748015][ T5450] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.755787][ T5450] vhci_hcd vhci_hcd.0: Device attached [ 65.764885][ T5452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.787601][ T5452] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 65.788747][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.795853][ T5452] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 65.820906][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.830377][ T4911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.024763][ T4435] usb 10-1: SetAddress Request (6) to port 0 [ 66.030833][ T4435] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 66.167009][ T5470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.176005][ T5470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.373944][ T5472] loop0: detected capacity change from 0 to 256 [ 66.424281][ T5453] vhci_hcd: connection reset by peer [ 66.429763][ T50] vhci_hcd: stop threads [ 66.434026][ T50] vhci_hcd: release socket [ 66.438605][ T50] vhci_hcd: disconnect device [ 66.745879][ T5477] loop3: detected capacity change from 0 to 512 [ 66.768319][ T5483] loop1: detected capacity change from 0 to 128 [ 66.769737][ T5482] loop0: detected capacity change from 0 to 256 [ 66.785574][ T5477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.802541][ T5477] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.103348][ T5495] loop2: detected capacity change from 0 to 512 [ 67.110619][ T5495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.159306][ T5488] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.257359][ T5500] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 67.927053][ T5495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.961975][ T5495] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.988181][ T4911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.023569][ T29] kauditd_printk_skb: 887 callbacks suppressed [ 68.023584][ T29] audit: type=1326 audit(1727929782.967:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.053910][ T29] audit: type=1326 audit(1727929782.977:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.077306][ T29] audit: type=1326 audit(1727929782.977:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.079025][ T5509] loop0: detected capacity change from 0 to 256 [ 68.101209][ T29] audit: type=1326 audit(1727929782.977:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.130759][ T29] audit: type=1326 audit(1727929782.977:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.154500][ T29] audit: type=1326 audit(1727929782.977:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.178297][ T29] audit: type=1326 audit(1727929782.977:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.201832][ T29] audit: type=1326 audit(1727929782.977:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.207326][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.225296][ T29] audit: type=1326 audit(1727929782.977:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.237013][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.256779][ T29] audit: type=1326 audit(1727929782.977:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed627ddff9 code=0x7ffc0000 [ 68.289079][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.297092][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.447656][ T5521] capability: warning: `syz.1.364' uses deprecated v2 capabilities in a way that may be insecure [ 68.662278][ T4474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.663401][ T5523] loop3: detected capacity change from 0 to 1024 [ 68.682932][ T5523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.693425][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.710367][ T5523] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.363: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 68.728980][ T5523] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.363: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 68.818138][ T5527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 68.824667][ T5527] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.832436][ T5527] vhci_hcd vhci_hcd.0: Device attached [ 68.869645][ T5529] netlink: 'syz.1.369': attribute type 39 has an invalid length. [ 68.951888][ T5523] ================================================================== [ 68.960010][ T5523] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 68.968106][ T5523] [ 68.970423][ T5523] write to 0xffff88810f7fc530 of 8 bytes by task 5525 on cpu 0: [ 68.978048][ T5523] filemap_splice_read+0x6c4/0x910 [ 68.983172][ T5523] ext4_file_splice_read+0x8f/0xb0 [ 68.988296][ T5523] splice_direct_to_actor+0x269/0x670 [ 68.993672][ T5523] do_splice_direct+0xd7/0x150 [ 68.998438][ T5523] do_sendfile+0x39b/0x970 [ 69.002860][ T5523] __x64_sys_sendfile64+0x110/0x150 [ 69.008064][ T5523] x64_sys_call+0xed5/0x2d60 [ 69.012663][ T5523] do_syscall_64+0xc9/0x1c0 [ 69.017165][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.023069][ T5523] [ 69.025393][ T5523] write to 0xffff88810f7fc530 of 8 bytes by task 5523 on cpu 1: [ 69.033023][ T5523] filemap_splice_read+0x6c4/0x910 [ 69.038154][ T5523] ext4_file_splice_read+0x8f/0xb0 [ 69.043277][ T5523] splice_direct_to_actor+0x269/0x670 [ 69.048674][ T5523] do_splice_direct+0xd7/0x150 [ 69.053457][ T5523] do_sendfile+0x39b/0x970 [ 69.057885][ T5523] __x64_sys_sendfile64+0x110/0x150 [ 69.063086][ T5523] x64_sys_call+0xed5/0x2d60 [ 69.067687][ T5523] do_syscall_64+0xc9/0x1c0 [ 69.072201][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.078211][ T5523] [ 69.080528][ T5523] value changed: 0x000000000000046e -> 0x000000000000046f [ 69.087634][ T5523] [ 69.089951][ T5523] Reported by Kernel Concurrency Sanitizer on: [ 69.096099][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.3.363 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 69.106781][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.116840][ T5523] ================================================================== [ 69.415318][ T5523] ================================================================== [ 69.423420][ T5523] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 69.431152][ T5523] [ 69.433471][ T5523] write to 0xffff8881135ed924 of 4 bytes by task 5525 on cpu 0: [ 69.441960][ T5523] xas_set_mark+0x131/0x150 [ 69.446465][ T5523] __folio_start_writeback+0x1f1/0x440 [ 69.451949][ T5523] ext4_bio_write_folio+0x58b/0x9a0 [ 69.457186][ T5523] mpage_process_page_bufs+0x486/0x5d0 [ 69.462666][ T5523] mpage_prepare_extent_to_map+0x788/0xb80 [ 69.468488][ T5523] ext4_do_writepages+0x6ea/0x2130 [ 69.473606][ T5523] ext4_writepages+0x159/0x2e0 [ 69.478386][ T5523] do_writepages+0x1d8/0x480 [ 69.482980][ T5523] filemap_fdatawrite_wbc+0xdb/0x100 [ 69.488270][ T5523] file_write_and_wait_range+0xc4/0x250 [ 69.493830][ T5523] generic_buffers_fsync_noflush+0x46/0x120 [ 69.499732][ T5523] ext4_sync_file+0x1ff/0x6c0 [ 69.504411][ T5523] vfs_fsync_range+0x116/0x130 [ 69.509168][ T5523] ext4_buffered_write_iter+0x326/0x370 [ 69.514711][ T5523] ext4_file_write_iter+0x293/0xe10 [ 69.519900][ T5523] iter_file_splice_write+0x5f1/0x980 [ 69.525260][ T5523] direct_splice_actor+0x160/0x2c0 [ 69.530364][ T5523] splice_direct_to_actor+0x302/0x670 [ 69.535725][ T5523] do_splice_direct+0xd7/0x150 [ 69.540477][ T5523] do_sendfile+0x39b/0x970 [ 69.544883][ T5523] __x64_sys_sendfile64+0x110/0x150 [ 69.550074][ T5523] x64_sys_call+0xed5/0x2d60 [ 69.554658][ T5523] do_syscall_64+0xc9/0x1c0 [ 69.559149][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.565038][ T5523] [ 69.567349][ T5523] read to 0xffff8881135ed924 of 4 bytes by task 5523 on cpu 1: [ 69.574874][ T5523] filemap_fdatawrite_wbc+0x5c/0x100 [ 69.580172][ T5523] file_write_and_wait_range+0xc4/0x250 [ 69.585713][ T5523] generic_buffers_fsync_noflush+0x46/0x120 [ 69.591596][ T5523] ext4_sync_file+0x1ff/0x6c0 [ 69.596268][ T5523] vfs_fsync_range+0x116/0x130 [ 69.601023][ T5523] ext4_buffered_write_iter+0x326/0x370 [ 69.606563][ T5523] ext4_file_write_iter+0x293/0xe10 [ 69.611756][ T5523] iter_file_splice_write+0x5f1/0x980 [ 69.617118][ T5523] direct_splice_actor+0x160/0x2c0 [ 69.622219][ T5523] splice_direct_to_actor+0x302/0x670 [ 69.627580][ T5523] do_splice_direct+0xd7/0x150 [ 69.632332][ T5523] do_sendfile+0x39b/0x970 [ 69.636738][ T5523] __x64_sys_sendfile64+0x110/0x150 [ 69.641925][ T5523] x64_sys_call+0xed5/0x2d60 [ 69.646510][ T5523] do_syscall_64+0xc9/0x1c0 [ 69.651004][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.656892][ T5523] [ 69.659205][ T5523] value changed: 0x0a000021 -> 0x04000021 [ 69.664904][ T5523] [ 69.667208][ T5523] Reported by Kernel Concurrency Sanitizer on: [ 69.673338][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.3.363 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 69.683910][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.693951][ T5523] ================================================================== [ 69.711217][ T4911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.894484][ T5530] vhci_hcd: connection closed [ 69.894653][ T28] vhci_hcd: stop threads [ 69.903603][ T28] vhci_hcd: release socket [ 69.908106][ T28] vhci_hcd: disconnect device [ 71.074127][ T4435] usb 10-1: device descriptor read/8, error -110 [ 71.184112][ T4435] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 71.204161][ T4435] usb 10-1: enqueue for inactive port 0 [ 71.209734][ T4435] usb 10-1: enqueue for inactive port 0 [ 71.215309][ T4435] usb 10-1: enqueue for inactive port 0 [ 72.244465][ T4435] usb usb10-port1: attempt power cycle [ 74.074228][ T4435] usb usb10-port1: unable to enumerate USB device