last executing test programs: 2.653087983s ago: executing program 2 (id=85): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) inotify_init1(0x800) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc4c03d12, 0x0) 2.534945232s ago: executing program 1 (id=88): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101682, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 2.493964896s ago: executing program 1 (id=89): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 2.44322117s ago: executing program 1 (id=90): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x89, r2, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0x4a, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xffffffffffffffd3, 0x90, 0x3}}]}, 0x9d}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xaca}}, './bus\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000000740)="cc", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) 1.757562536s ago: executing program 0 (id=95): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="180000006a0b0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000061000000850000000600000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff7}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.668625993s ago: executing program 2 (id=96): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x80000) 1.556502613s ago: executing program 4 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x689d80000000) 1.528151575s ago: executing program 4 (id=100): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101682, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 1.478532379s ago: executing program 2 (id=101): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 1.364674858s ago: executing program 2 (id=103): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) 1.364403628s ago: executing program 4 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, 0x0) 1.325688302s ago: executing program 1 (id=105): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x24, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.182294893s ago: executing program 2 (id=106): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80003, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x121500) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.181976883s ago: executing program 4 (id=107): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$rfkill(r0, &(0x7f0000000040), 0x8) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa6d78b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f5c008d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.040823685s ago: executing program 1 (id=108): faccessat(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getpeername(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3002c8cc}, 0x0) 892.630007ms ago: executing program 1 (id=109): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x8}, {0x0, 0x4}, {0x10000001, 0x4, 0x1000b, 0x5}], 0x10, 0xfffffff4}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) read(r5, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000800)) 892.407307ms ago: executing program 4 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000600)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) pipe2(&(0x7f0000001cc0), 0x800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x24000400) 861.343119ms ago: executing program 0 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x80000) 767.190957ms ago: executing program 0 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x689d80000000) 753.041438ms ago: executing program 0 (id=113): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff7}]}) close_range(r5, 0xffffffffffffffff, 0x0) 64.212665ms ago: executing program 3 (id=122): faccessat(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getpeername(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3002c8cc}, 0x0) 0s ago: executing program 4 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x80000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 22.603707][ T29] audit: type=1400 audit(1754430855.617:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.604542][ T3289] cgroup: Unknown subsys name 'net' [ 22.626469][ T29] audit: type=1400 audit(1754430855.617:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.654001][ T29] audit: type=1400 audit(1754430855.647:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.890952][ T3289] cgroup: Unknown subsys name 'cpuset' [ 22.897044][ T3289] cgroup: Unknown subsys name 'rlimit' [ 23.026393][ T29] audit: type=1400 audit(1754430856.037:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.049691][ T29] audit: type=1400 audit(1754430856.037:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.070150][ T29] audit: type=1400 audit(1754430856.037:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.071180][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.090503][ T29] audit: type=1400 audit(1754430856.037:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.119258][ T29] audit: type=1400 audit(1754430856.047:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.144026][ T29] audit: type=1400 audit(1754430856.047:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.167253][ T29] audit: type=1400 audit(1754430856.117:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.169930][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.495289][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 24.527890][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 24.541772][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 24.586139][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.635978][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.643078][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.650329][ T3304] bridge_slave_0: entered allmulticast mode [ 24.656945][ T3304] bridge_slave_0: entered promiscuous mode [ 24.664539][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.671621][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.678735][ T3304] bridge_slave_1: entered allmulticast mode [ 24.685126][ T3304] bridge_slave_1: entered promiscuous mode [ 24.695265][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.702357][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.709428][ T3300] bridge_slave_0: entered allmulticast mode [ 24.715730][ T3300] bridge_slave_0: entered promiscuous mode [ 24.722340][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.729420][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.737253][ T3300] bridge_slave_1: entered allmulticast mode [ 24.743684][ T3300] bridge_slave_1: entered promiscuous mode [ 24.786514][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.793810][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.801662][ T3301] bridge_slave_0: entered allmulticast mode [ 24.807860][ T3301] bridge_slave_0: entered promiscuous mode [ 24.817339][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.832790][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.842030][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.849141][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.856326][ T3301] bridge_slave_1: entered allmulticast mode [ 24.862689][ T3301] bridge_slave_1: entered promiscuous mode [ 24.872547][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 24.886649][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.901400][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.921619][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.928710][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.935894][ T3313] bridge_slave_0: entered allmulticast mode [ 24.942371][ T3313] bridge_slave_0: entered promiscuous mode [ 24.958220][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.977794][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.984925][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.992223][ T3313] bridge_slave_1: entered allmulticast mode [ 24.998565][ T3313] bridge_slave_1: entered promiscuous mode [ 25.005260][ T3300] team0: Port device team_slave_0 added [ 25.011934][ T3300] team0: Port device team_slave_1 added [ 25.018779][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.030170][ T3304] team0: Port device team_slave_0 added [ 25.051646][ T3304] team0: Port device team_slave_1 added [ 25.080765][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.090036][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.097011][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.122978][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.134477][ T3301] team0: Port device team_slave_0 added [ 25.149476][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.158960][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.165946][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.191920][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.203374][ T3301] team0: Port device team_slave_1 added [ 25.209324][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.216301][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.242176][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.252799][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.259888][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.267019][ T3307] bridge_slave_0: entered allmulticast mode [ 25.273245][ T3307] bridge_slave_0: entered promiscuous mode [ 25.294454][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.301521][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.327417][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.340712][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.347782][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.354953][ T3307] bridge_slave_1: entered allmulticast mode [ 25.361360][ T3307] bridge_slave_1: entered promiscuous mode [ 25.373325][ T3313] team0: Port device team_slave_0 added [ 25.384344][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.391307][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.417212][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.428395][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.435503][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.461404][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.480415][ T3313] team0: Port device team_slave_1 added [ 25.492815][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.503327][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.532168][ T3304] hsr_slave_0: entered promiscuous mode [ 25.538242][ T3304] hsr_slave_1: entered promiscuous mode [ 25.557511][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.564567][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.590540][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.611307][ T3300] hsr_slave_0: entered promiscuous mode [ 25.617232][ T3300] hsr_slave_1: entered promiscuous mode [ 25.623125][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 25.628830][ T3300] Cannot create hsr debugfs directory [ 25.639531][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.646512][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.672486][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.687628][ T3307] team0: Port device team_slave_0 added [ 25.694234][ T3307] team0: Port device team_slave_1 added [ 25.703969][ T3301] hsr_slave_0: entered promiscuous mode [ 25.709871][ T3301] hsr_slave_1: entered promiscuous mode [ 25.715749][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 25.721513][ T3301] Cannot create hsr debugfs directory [ 25.746393][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.753383][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.779328][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.790506][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.797506][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.823626][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.884466][ T3313] hsr_slave_0: entered promiscuous mode [ 25.890397][ T3313] hsr_slave_1: entered promiscuous mode [ 25.896218][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 25.901953][ T3313] Cannot create hsr debugfs directory [ 25.917682][ T3307] hsr_slave_0: entered promiscuous mode [ 25.923785][ T3307] hsr_slave_1: entered promiscuous mode [ 25.929565][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 25.935316][ T3307] Cannot create hsr debugfs directory [ 26.062910][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.079570][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.089864][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.106076][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.126568][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.135315][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.144712][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.154225][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.183985][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.194200][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.210917][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.219569][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.254211][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.263758][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.274650][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.289511][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.298568][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.309697][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.335047][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.342216][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.351532][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.358661][ T1380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.373104][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.385558][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.396732][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.405830][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.415763][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.449619][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.473000][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.480017][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.493218][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.500701][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.509335][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.516465][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.535449][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.556151][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.563236][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.576296][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.586554][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.604107][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.615574][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.622704][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.636667][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.643781][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.657192][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.695033][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.702107][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.733070][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.747451][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.764083][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.781810][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.802564][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.809642][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.819782][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.826905][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.859564][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.877857][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.926906][ T3300] veth0_vlan: entered promiscuous mode [ 26.944245][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.954604][ T3300] veth1_vlan: entered promiscuous mode [ 26.983403][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.009017][ T3300] veth0_macvtap: entered promiscuous mode [ 27.017901][ T3300] veth1_macvtap: entered promiscuous mode [ 27.034535][ T3304] veth0_vlan: entered promiscuous mode [ 27.045447][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.057058][ T3304] veth1_vlan: entered promiscuous mode [ 27.064667][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.079067][ T3304] veth0_macvtap: entered promiscuous mode [ 27.095915][ T3313] veth0_vlan: entered promiscuous mode [ 27.109543][ T3304] veth1_macvtap: entered promiscuous mode [ 27.122279][ T3313] veth1_vlan: entered promiscuous mode [ 27.132023][ T121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.143501][ T3307] veth0_vlan: entered promiscuous mode [ 27.152013][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.166345][ T3313] veth0_macvtap: entered promiscuous mode [ 27.182307][ T121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.191277][ T121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.199958][ T121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.209648][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.219161][ T3307] veth1_vlan: entered promiscuous mode [ 27.232983][ T3313] veth1_macvtap: entered promiscuous mode [ 27.245180][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.258389][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.267410][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.279380][ T3301] veth0_vlan: entered promiscuous mode [ 27.292796][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.306550][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.317316][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.322227][ T3307] veth0_macvtap: entered promiscuous mode [ 27.341320][ T3301] veth1_vlan: entered promiscuous mode [ 27.348813][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.364158][ T3307] veth1_macvtap: entered promiscuous mode [ 27.375816][ T2221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.403293][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.410644][ T121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.420271][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.432813][ T3301] veth0_macvtap: entered promiscuous mode [ 27.449984][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.457997][ T3301] veth1_macvtap: entered promiscuous mode [ 27.470712][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.483890][ T3472] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 27.488449][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.491393][ T3472] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.5'. [ 27.512158][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.531107][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.539278][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.565027][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.582521][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.620900][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.645226][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 27.645239][ T29] audit: type=1326 audit(1754430860.657:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.690648][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.690821][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.690953][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.702281][ T3486] openvswitch: netlink: Message has 6 unknown bytes. [ 27.713101][ T29] audit: type=1326 audit(1754430860.657:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713164][ T29] audit: type=1326 audit(1754430860.657:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713205][ T29] audit: type=1326 audit(1754430860.657:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713306][ T29] audit: type=1326 audit(1754430860.657:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713328][ T29] audit: type=1326 audit(1754430860.657:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713413][ T29] audit: type=1326 audit(1754430860.657:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713494][ T29] audit: type=1326 audit(1754430860.657:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713516][ T29] audit: type=1326 audit(1754430860.657:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.713637][ T29] audit: type=1326 audit(1754430860.657:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70daaeb69 code=0x7ffc0000 [ 27.782605][ T3489] loop3: detected capacity change from 0 to 128 [ 27.873929][ T3484] loop1: detected capacity change from 0 to 128 [ 27.961516][ T3489] syz.3.6: attempt to access beyond end of device [ 27.961516][ T3489] loop3: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 28.013839][ T3491] loop2: detected capacity change from 0 to 1024 [ 28.040564][ T3491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.046675][ T3484] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.066017][ T3484] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 28.067541][ T3489] syz.3.6: attempt to access beyond end of device [ 28.067541][ T3489] loop3: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 28.109929][ T3495] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.180278][ T3489] syz.3.6: attempt to access beyond end of device [ 28.180278][ T3489] loop3: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 28.202314][ T3489] syz.3.6: attempt to access beyond end of device [ 28.202314][ T3489] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.222928][ T3489] syz.3.6: attempt to access beyond end of device [ 28.222928][ T3489] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.237863][ T3489] syz.3.6: attempt to access beyond end of device [ 28.237863][ T3489] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.253756][ T3488] syz.3.6: attempt to access beyond end of device [ 28.253756][ T3488] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.266823][ T3489] syz.3.6: attempt to access beyond end of device [ 28.266823][ T3489] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.282122][ T3488] syz.3.6: attempt to access beyond end of device [ 28.282122][ T3488] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.298260][ T3489] syz.3.6: attempt to access beyond end of device [ 28.298260][ T3489] loop3: rw=0, sector=241, nr_sectors = 8 limit=128 [ 28.351175][ T3501] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 28.363912][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.376285][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.396557][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 28.436926][ T3507] loop2: detected capacity change from 0 to 1024 [ 28.444928][ T3505] team0: Port device team_slave_1 removed [ 28.447810][ T3507] EXT4-fs: Ignoring removed orlov option [ 28.470081][ T3507] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 28.481754][ T3515] loop1: detected capacity change from 0 to 128 [ 28.503529][ T3507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.570622][ T3519] loop0: detected capacity change from 0 to 128 [ 28.605296][ T3519] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.619684][ T3519] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.650346][ C0] hrtimer: interrupt took 23373 ns [ 28.668095][ T3519] lo speed is unknown, defaulting to 1000 [ 28.674212][ T3519] lo speed is unknown, defaulting to 1000 [ 28.682425][ T3519] lo speed is unknown, defaulting to 1000 [ 28.691634][ T3519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 28.706274][ T3519] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 28.764409][ T3519] lo speed is unknown, defaulting to 1000 [ 28.773473][ T3519] lo speed is unknown, defaulting to 1000 [ 28.783175][ T3519] lo speed is unknown, defaulting to 1000 [ 28.792632][ T3519] lo speed is unknown, defaulting to 1000 [ 28.801857][ T3519] lo speed is unknown, defaulting to 1000 [ 28.923973][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 29.009383][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.441192][ T3524] loop3: detected capacity change from 0 to 1024 [ 29.448218][ T3524] ======================================================= [ 29.448218][ T3524] WARNING: The mand mount option has been deprecated and [ 29.448218][ T3524] and is ignored by this kernel. Remove the mand [ 29.448218][ T3524] option from the mount to silence this warning. [ 29.448218][ T3524] ======================================================= [ 29.719529][ T3531] loop2: detected capacity change from 0 to 128 [ 29.743088][ T3532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'. [ 29.751939][ T3532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 29.760786][ T3532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'. [ 29.796693][ T3524] ext4: Unknown parameter 'noacl' [ 29.852716][ T3532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'. [ 29.862743][ T3519] syz.0.14 (3519) used greatest stack depth: 10376 bytes left [ 30.115042][ T3543] Zero length message leads to an empty skb [ 30.158636][ T3544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20'. [ 30.167485][ T3544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 30.176274][ T3544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20'. [ 30.225461][ T3546] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.225791][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.257958][ T3549] loop2: detected capacity change from 0 to 512 [ 30.286850][ T3551] loop4: detected capacity change from 0 to 512 [ 30.296098][ T3549] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 30.314178][ T3549] EXT4-fs (loop2): mount failed [ 30.324714][ T3551] EXT4-fs (loop4): too many log groups per flexible block group [ 30.327179][ T3549] mmap: syz.2.24 (3549) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.332423][ T3551] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 30.364664][ T3551] EXT4-fs (loop4): mount failed [ 30.647992][ T3576] loop4: detected capacity change from 0 to 512 [ 30.662339][ T3576] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 30.677274][ T3576] EXT4-fs (loop4): mount failed [ 31.213428][ T3596] loop0: detected capacity change from 0 to 1024 [ 31.221244][ T3596] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.234152][ T3596] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.36: Invalid block bitmap block 0 in block_group 0 [ 31.256664][ T3596] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.36: Failed to acquire dquot type 0 [ 31.269387][ T3596] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.36: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.283216][ T3596] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.36: Invalid inode bitmap blk 0 in block_group 0 [ 31.298025][ T3596] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 31.306905][ T3596] EXT4-fs (loop0): 1 orphan inode deleted [ 31.310437][ T3525] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 31.313220][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.355074][ T3596] syz.0.36 (3596) used greatest stack depth: 9312 bytes left [ 31.408115][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.417258][ T3603] loop1: detected capacity change from 0 to 8192 [ 31.451556][ T3607] unsupported nlmsg_type 40 [ 31.468371][ T3607] lo speed is unknown, defaulting to 1000 [ 31.512473][ T3608] veth1_macvtap: left promiscuous mode [ 31.567389][ T3605] Unsupported ieee802154 address type: 0 [ 31.732686][ T3624] bond1: entered promiscuous mode [ 31.737790][ T3624] bond1: entered allmulticast mode [ 31.784084][ T3629] loop2: detected capacity change from 0 to 512 [ 31.795959][ T3624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.834857][ T3629] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.844724][ T3624] bond1 (unregistering): Released all slaves [ 32.175837][ T3629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.189491][ T3629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.227967][ T3629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 32.238610][ T3629] System zones: 1-12 [ 32.243444][ T3646] loop4: detected capacity change from 0 to 512 [ 32.243552][ T3629] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.266191][ T3646] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 32.279752][ T3646] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.53: invalid indirect mapped block 2683928664 (level 1) [ 32.296721][ T3629] EXT4-fs (loop2): 1 truncate cleaned up [ 32.303013][ T3629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.317305][ T3646] EXT4-fs (loop4): 1 truncate cleaned up [ 32.323761][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.354024][ T3646] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.53: corrupted in-inode xattr: e_value out of bounds [ 32.372198][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.391866][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.504295][ T3654] __nla_validate_parse: 19 callbacks suppressed [ 32.504310][ T3654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.55'. [ 32.519475][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'. [ 32.528300][ T3654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.55'. [ 32.534846][ T3656] loop2: detected capacity change from 0 to 128 [ 32.541498][ T3654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.55'. [ 32.561387][ T3653] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.593875][ T3661] loop1: detected capacity change from 0 to 512 [ 32.643731][ T3661] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 32.707320][ T3661] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.58: invalid indirect mapped block 2683928664 (level 1) [ 32.741184][ T3669] loop3: detected capacity change from 0 to 512 [ 32.755431][ T3672] loop0: detected capacity change from 0 to 512 [ 32.761918][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 32.761931][ T29] audit: type=1400 audit(1754430865.747:401): avc: denied { write } for pid=3668 comm="syz.3.60" name="ptype" dev="proc" ino=4026532500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.791824][ T3661] EXT4-fs (loop1): 1 truncate cleaned up [ 32.797913][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.812551][ T3661] FAULT_INJECTION: forcing a failure. [ 32.812551][ T3661] name failslab, interval 1, probability 0, space 0, times 1 [ 32.825306][ T3661] CPU: 0 UID: 0 PID: 3661 Comm: syz.1.58 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 32.825330][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.825340][ T3661] Call Trace: [ 32.825345][ T3661] [ 32.825351][ T3661] __dump_stack+0x1d/0x30 [ 32.825369][ T3661] dump_stack_lvl+0xe8/0x140 [ 32.825384][ T3661] dump_stack+0x15/0x1b [ 32.825462][ T3661] should_fail_ex+0x265/0x280 [ 32.825559][ T3661] should_failslab+0x8c/0xb0 [ 32.825581][ T3661] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 32.825614][ T3661] ? __d_alloc+0x3d/0x340 [ 32.825637][ T3661] __d_alloc+0x3d/0x340 [ 32.825747][ T3661] ? avc_has_perm_noaudit+0x1b1/0x200 [ 32.825766][ T3661] d_alloc_parallel+0x53/0xc60 [ 32.825789][ T3661] ? selinux_inode_permission+0x62d/0x740 [ 32.825828][ T3661] ? make_vfsuid+0x49/0xa0 [ 32.825849][ T3661] ? lockref_get_not_dead+0x120/0x1c0 [ 32.825873][ T3661] ? __rcu_read_unlock+0x4f/0x70 [ 32.825922][ T3661] __lookup_slow+0x8c/0x250 [ 32.825949][ T3661] lookup_slow+0x3c/0x60 [ 32.825981][ T3661] walk_component+0x1ec/0x220 [ 32.826002][ T3661] path_lookupat+0xfe/0x2a0 [ 32.826092][ T3661] filename_lookup+0x147/0x340 [ 32.826160][ T3661] vfs_statx+0x9d/0x390 [ 32.826185][ T3661] vfs_fstatat+0x115/0x170 [ 32.826208][ T3661] __se_sys_newfstatat+0x55/0x260 [ 32.826239][ T3661] ? __fget_files+0x184/0x1c0 [ 32.826337][ T3661] ? fput+0x8f/0xc0 [ 32.826361][ T3661] ? ksys_write+0x192/0x1a0 [ 32.826379][ T3661] __x64_sys_newfstatat+0x55/0x70 [ 32.826409][ T3661] x64_sys_call+0x135a/0x2ff0 [ 32.826507][ T3661] do_syscall_64+0xd2/0x200 [ 32.826529][ T3661] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.826600][ T3661] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.826618][ T3661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.826647][ T3661] RIP: 0033:0x7f1d5db2eb69 [ 32.826669][ T3661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.826685][ T3661] RSP: 002b:00007f1d5c18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 32.826703][ T3661] RAX: ffffffffffffffda RBX: 00007f1d5dd55fa0 RCX: 00007f1d5db2eb69 [ 32.826715][ T3661] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 32.826725][ T3661] RBP: 00007f1d5c18f090 R08: 0000000000000000 R09: 0000000000000000 [ 32.826816][ T3661] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 32.826825][ T3661] R13: 0000000000000000 R14: 00007f1d5dd55fa0 R15: 00007fff529bf448 [ 32.826839][ T3661] [ 32.826942][ T3672] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.827273][ T3669] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 32.854330][ T3672] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.61: bg 0: block 248: padding at end of block bitmap is not set [ 32.860144][ T3669] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.136455][ T3669] EXT4-fs (loop3): mount failed [ 33.142605][ T3672] Quota error (device loop0): write_blk: dquota write failed [ 33.150008][ T3672] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 33.159987][ T3672] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.61: Failed to acquire dquot type 1 [ 33.177595][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.190428][ T29] audit: type=1400 audit(1754430866.187:402): avc: denied { create } for pid=3664 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 33.209827][ T29] audit: type=1400 audit(1754430866.187:403): avc: denied { read } for pid=3664 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 33.229706][ T3672] EXT4-fs (loop0): 1 truncate cleaned up [ 33.237195][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.255546][ T3678] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.272629][ T3672] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.305599][ T3672] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 33.306767][ T3682] netlink: 25 bytes leftover after parsing attributes in process `syz.3.64'. [ 33.330872][ T29] audit: type=1400 audit(1754430866.337:404): avc: denied { create } for pid=3671 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.363677][ T3672] syz.0.61 (3672) used greatest stack depth: 9280 bytes left [ 33.388541][ T29] audit: type=1400 audit(1754430866.377:405): avc: denied { read write } for pid=3679 comm="syz.1.62" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.388574][ T29] audit: type=1400 audit(1754430866.377:406): avc: denied { open } for pid=3679 comm="syz.1.62" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.437598][ T29] audit: type=1400 audit(1754430866.377:407): avc: denied { create } for pid=3684 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.438931][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.467458][ T3682] loop3: detected capacity change from 0 to 512 [ 33.476626][ T3682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.329961][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.348454][ T3717] loop1: detected capacity change from 0 to 512 [ 34.435062][ T3717] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.454943][ T3717] EXT4-fs (loop1): mount failed [ 34.517595][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.79'. [ 34.526465][ T3735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'. [ 34.535293][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.79'. [ 34.549056][ T3732] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 34.549445][ T3737] loop2: detected capacity change from 0 to 128 [ 34.556651][ T3732] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.83'. [ 34.560947][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.79'. [ 34.589231][ T3737] bio_check_eod: 5687 callbacks suppressed [ 34.589246][ T3737] syz.2.85: attempt to access beyond end of device [ 34.589246][ T3737] loop2: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 34.636401][ T3737] syz.2.85: attempt to access beyond end of device [ 34.636401][ T3737] loop2: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 34.659858][ T3737] syz.2.85: attempt to access beyond end of device [ 34.659858][ T3737] loop2: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 34.673978][ T3737] syz.2.85: attempt to access beyond end of device [ 34.673978][ T3737] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 34.703995][ T3750] loop1: detected capacity change from 0 to 512 [ 34.711621][ T3736] syz.2.85: attempt to access beyond end of device [ 34.711621][ T3736] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 34.725958][ T3737] syz.2.85: attempt to access beyond end of device [ 34.725958][ T3737] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 34.738319][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.740241][ T3737] syz.2.85: attempt to access beyond end of device [ 34.740241][ T3737] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 34.811805][ T3736] syz.2.85: attempt to access beyond end of device [ 34.811805][ T3736] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 34.841940][ T3737] syz.2.85: attempt to access beyond end of device [ 34.841940][ T3737] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 34.855311][ T3737] syz.2.85: attempt to access beyond end of device [ 34.855311][ T3737] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 35.417764][ T3765] loop3: detected capacity change from 0 to 512 [ 35.452594][ T3765] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.475687][ T3765] EXT4-fs (loop3): mount failed [ 35.841782][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.979032][ T3795] loop4: detected capacity change from 0 to 512 [ 36.034171][ T3795] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.099867][ T3795] EXT4-fs (loop4): mount failed [ 36.326995][ T3808] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 36.441240][ T3818] loop0: detected capacity change from 0 to 512 [ 36.492382][ T3818] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.919851][ T3834] loop2: detected capacity change from 0 to 512 [ 36.952940][ T3818] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.966041][ T3834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.994703][ T3818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 37.014298][ T3840] loop3: detected capacity change from 0 to 512 [ 37.020895][ T3818] System zones: 1-12 [ 37.025702][ T3818] EXT4-fs (loop0): 1 truncate cleaned up [ 37.043780][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.057567][ T3840] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.080881][ T3840] EXT4-fs (loop3): mount failed [ 37.086878][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.177080][ T3834] ================================================================== [ 37.185196][ T3834] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 37.193437][ T3834] [ 37.195737][ T3834] write to 0xffff888105579844 of 4 bytes by task 3844 on cpu 1: [ 37.203340][ T3834] xas_set_mark+0x12b/0x140 [ 37.207829][ T3834] __folio_start_writeback+0x1dd/0x440 [ 37.213271][ T3834] ext4_bio_write_folio+0x5ad/0x9f0 [ 37.218450][ T3834] mpage_process_page_bufs+0x4a1/0x620 [ 37.223886][ T3834] mpage_prepare_extent_to_map+0x786/0xc00 [ 37.229669][ T3834] ext4_do_writepages+0x708/0x2750 [ 37.234765][ T3834] ext4_writepages+0x176/0x300 [ 37.239520][ T3834] do_writepages+0x1c6/0x310 [ 37.244103][ T3834] file_write_and_wait_range+0x156/0x2c0 [ 37.249729][ T3834] generic_buffers_fsync_noflush+0x45/0x120 [ 37.255604][ T3834] ext4_sync_file+0x1ab/0x690 [ 37.260272][ T3834] vfs_fsync_range+0x10d/0x130 [ 37.265020][ T3834] ext4_buffered_write_iter+0x34f/0x3c0 [ 37.270558][ T3834] ext4_file_write_iter+0xdbf/0xf00 [ 37.275747][ T3834] iter_file_splice_write+0x5ef/0x970 [ 37.281101][ T3834] direct_splice_actor+0x153/0x2a0 [ 37.286201][ T3834] splice_direct_to_actor+0x30f/0x680 [ 37.291565][ T3834] do_splice_direct+0xda/0x150 [ 37.296316][ T3834] do_sendfile+0x380/0x650 [ 37.300806][ T3834] __x64_sys_sendfile64+0x105/0x150 [ 37.305994][ T3834] x64_sys_call+0x2bb0/0x2ff0 [ 37.310753][ T3834] do_syscall_64+0xd2/0x200 [ 37.315250][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.321148][ T3834] [ 37.323540][ T3834] read to 0xffff888105579844 of 4 bytes by task 3834 on cpu 0: [ 37.331238][ T3834] filemap_write_and_wait_range+0xfc/0x340 [ 37.337066][ T3834] filemap_invalidate_pages+0xa4/0x1a0 [ 37.342519][ T3834] kiocb_invalidate_pages+0x6e/0x80 [ 37.347697][ T3834] __iomap_dio_rw+0x5d4/0x1250 [ 37.352466][ T3834] iomap_dio_rw+0x40/0x90 [ 37.356781][ T3834] ext4_file_write_iter+0xad9/0xf00 [ 37.361968][ T3834] iter_file_splice_write+0x5ef/0x970 [ 37.367329][ T3834] direct_splice_actor+0x153/0x2a0 [ 37.372421][ T3834] splice_direct_to_actor+0x30f/0x680 [ 37.377773][ T3834] do_splice_direct+0xda/0x150 [ 37.382519][ T3834] do_sendfile+0x380/0x650 [ 37.386922][ T3834] __x64_sys_sendfile64+0x105/0x150 [ 37.392141][ T3834] x64_sys_call+0x2bb0/0x2ff0 [ 37.396804][ T3834] do_syscall_64+0xd2/0x200 [ 37.401293][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.407169][ T3834] [ 37.409472][ T3834] value changed: 0x0a000021 -> 0x04000021 [ 37.415170][ T3834] [ 37.417471][ T3834] Reported by Kernel Concurrency Sanitizer on: [ 37.423599][ T3834] CPU: 0 UID: 0 PID: 3834 Comm: syz.2.117 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 37.435557][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.445596][ T3834] ================================================================== [ 37.866682][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.