last executing test programs: 13.798289847s ago: executing program 4 (id=237): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0400"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@lazytime}, {@auto_da_alloc}, {@discard}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x453, &(0x7f0000000f80)="$eJzs3L9vG1UcAPDv2XH6m4RSfrS0ECiIih9Jk5bSgaUIJAaQkGAoYgpJWpW6DWqCRKsKAkMZUSV2xIjEX8BCWRAwIbHCjpAilIXCZHT2XXAT24kTxw7485Gufc/vove+d/fsr9/ZDqBvjaT/JBF7I+KXiBiqVe/cYaT23+2l61N/LV2fSqJSef2PpLrfn0vXp/Jd87/bU6tUKi36vfFWxGS5PHMlq4/NX3p3bO7qtWcuXJo8P3N+5vLE6dMnTxwZPDXRmTj3pWM99MHs4YMvv3nz1amzN9/+4at0vHuz9vo4OmWkdnQberzTnfXYvrpyMtDDgdCWYkSkp6tUnf9DUYxdy21D8dLHPR0csKUqlUJlR/PmhQrwP5Ym6kA/yl/o0/e/+dal1GNbWDwTy+sYt7Ot1jIQhWyfUvYeaSuMRMTZhb8/T7fYonUIAIB6t85ExNON8r9C3Fe3313ZvaHhiLg7IvZHxD0RcSAi7o2o7nt/RDzQZv8r75Cszn8qQxsKbJ3S/O/57N7Wnflfnv3FcDGr7avGX0rOXSjPHM+OybEo7Ujr4y36+PbFnz9t1laf/6Vb2n+eC2bj+H1gxQLd9OT85GZirrf4UcShgUbxJ8s5b5ofH4yIQxvs48KTXx5u1rZ2/C10ICmvfBHxRO38L8SK+HNJ0/uT48+dmnh2bGeUZ46P5VfFaj/+dOO1Zv1vKv4OWLxVid0Nr//l+IeTnRFzV69drN6vnWu/jxu/ftL0Pc1Gr//B5I1qeTB77P3J+fkr4xGDySurH6+7h5zX8/3T6//Y0cbzf3/8eyQejIj0Ij4SEQ9FxMPZ2B+JiEcj4miL+L9/4bF32o+/xap8B6XxT691/qP+/LdfKF787uv248+l5/9ktXQse2Q9z3/rHeBmjh0AAAD8VxSqn4FPCqPL5UJhdLT2Gf4DsbtQnp2bf+rc7HuXp2uflR+OUiFf6RqqWw8dz9aG8/rEivqJbN34s+Kuan10arY83evgoc/taTL/U78Vez06YMv5vhb0L/Mf+lfr+b/QtXEA3ef1H/qX+Q/9q9H8/7AH4wC6b43X/13dGgfQffJ/6F/mP/Qv8x/6UtPvxhc29ZV/hR4Vvhnc3G81rL8QhW0ScicKSWyDYZSiYdPAun/MYoOFHQ2bev3MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BAAA//+1XOJt") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000a108000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000004bb9cbd5de04003a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x11, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x8, 0x10, 0x0, @void, @value, @void, @void, r7}, 0x20) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x589000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="c663770e6fdbaecf", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES64=r7], 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0xf00}) 13.380057235s ago: executing program 4 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) setsockopt$SO_ATTACH_FILTER(r4, 0x11a, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0) 13.262969769s ago: executing program 4 (id=243): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000100001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0008000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d001400636d61632861657329"], 0x1a8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040002aaaaaaaaaa00ac1414bbaaaaaaaaaa00ac"], 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12.65203586s ago: executing program 4 (id=252): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) 10.382070683s ago: executing program 0 (id=267): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x138) syz_open_pts(0xffffffffffffffff, 0x802) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0xffffffff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xfff1}, {}, {0x4, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.063167851s ago: executing program 0 (id=268): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000e80)={[{@noload}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@noauto_da_alloc}]}, 0x3, 0x443, &(0x7f0000000940)="$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") pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000340)=""/262, 0x106}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000000)=""/98, 0x62}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000b40)=""/127, 0x7f}], 0xa}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_raw(r1, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001"], 0xc8}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000003c0)=[{0x20, 0x0, 0xd, 0x0, @time={0x7, 0xfffffff7}, {0x0, 0xe}, {}, @control={0x4, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {0x6, 0x4}, {}, @raw32={[0x2, 0x80000000, 0x8]}}], 0x38) 9.703713202s ago: executing program 0 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x29, 0x2, 0x0, &(0x7f00000001c0)) syz_usbip_server_init(0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x3, 'ip6gre0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 9.565870239s ago: executing program 4 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000008000000000000000000000000000000000000000000af600b57ff57430f8b707709bf817afea7d0449b7a58da846a1f7db2d2a5230b66acfdafd06247c1abeaabcb844c1f0352ac54b1c47234e26cc297d779f19a93d20f9d11822af607e014c9905fa51876d5eefdca526bb178c98efd09a51342e972d895f5", @ANYBLOB="ee9c6e7352f39e1813eb56a7f4a76f3bf9c1294d1c25480a1f77236f36e868be484a2c23b76461a93b002019e44c4f0a039c6f9251b4b57cb8c7f2c73aaa9a0d0b73da65fca1d177359f480ac9b40ff489786070aec591dddedb76"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000089100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ftruncate(r4, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mlockall(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.354239913s ago: executing program 0 (id=272): r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/211, 0xd3}], 0x1, &(0x7f00000002c0)=""/73, 0x49}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000080)=@id, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000540)="8f", 0x1}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000300)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3fa}}, {@fat=@flush}, {@dots}, {@dots}, {@fat=@errors_remount}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@errors_continue}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2000582}}, {@nodots}, {@fat=@nfs}]}, 0xfd, 0x201, &(0x7f0000000740)="$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") r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfb}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x5, r7, 0x0, 0x0, 0x1}}, 0x20) 9.240423566s ago: executing program 0 (id=273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 8.245378652s ago: executing program 0 (id=278): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace(0x10, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc) 7.617714545s ago: executing program 4 (id=282): syz_usb_connect(0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_gettime(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xfffffff2, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0xf}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x2360}}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0x2000011a) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 5.816632004s ago: executing program 2 (id=287): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b00000081"]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) unshare(0x64000600) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 5.731471884s ago: executing program 2 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000fd0000060000000006001500070000000c0016"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 5.609494698s ago: executing program 2 (id=290): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_clone3(0x0, 0x0) 4.636117211s ago: executing program 2 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000280)=0x82) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="3558a1367bda32d8a8fbcbf9335fa3853bf4e81313f46ae41405298b651c82987f2c584c0912a74bb7806e082ce18e36", 0x30}, {0x0}], 0x2, 0x0, 0x2f4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") 4.268256854s ago: executing program 2 (id=299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000fd0000060000000006001500070000000c0016"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 3.960699749s ago: executing program 2 (id=300): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x8000100) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = accept4$packet(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x1) timerfd_create(0x9, 0x80800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYRESOCT=r5], 0x48) 3.70188772s ago: executing program 1 (id=303): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff0000008af0ff00000000bfa1000007010000f8ffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000000abda0300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x2d}, {0x6}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}]}, 0x34}}, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.467529527s ago: executing program 1 (id=305): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 1.151962276s ago: executing program 1 (id=307): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_clone3(0x0, 0x0) 819.324414ms ago: executing program 3 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000fd0000060000000006001500070000000c0016"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 738.108954ms ago: executing program 3 (id=313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000e80)={[{@noload}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@noauto_da_alloc}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000340)=""/262, 0x106}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000000)=""/98, 0x62}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000b40)=""/127, 0x7f}], 0xa}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_raw(r1, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001"], 0xc8}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000003c0)=[{0x20, 0x0, 0xd, 0x0, @time={0x7, 0xfffffff7}, {0x0, 0xe}, {}, @control={0x4, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {0x6, 0x4}, {}, @raw32={[0x2, 0x80000000, 0x8]}}], 0x38) 523.430059ms ago: executing program 3 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006002100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) 485.096024ms ago: executing program 3 (id=315): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000580)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 356.755008ms ago: executing program 3 (id=316): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff0000008af0ff00000000bfa1000007010000f8ffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000000abda0300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x2d}, {0x6}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}]}, 0x34}}, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 309.033653ms ago: executing program 3 (id=317): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffffff0100950000000000009500000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 265.528869ms ago: executing program 1 (id=318): syz_emit_ethernet(0x83, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x4d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x1, "00ffffffffff"}, {0x0, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x0, 0x1, "005ff9297d00001392"}]}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)) close(r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) 94.298329ms ago: executing program 1 (id=319): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000040)=ANY=[], 0x3, 0x7e0, &(0x7f0000000300)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6yu4qUSpySDerkTzJalfsropNKYmJ5WAsJyEhpDGlqS9JW1pKTz2muYZccmsptNBD21OhOfTSQyGQU0lLC6WlFFR2dtf6L9myZKfJ77d439mZZ95539nxPDurnZkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACKpTZVK5STqeWP+bLq52lSrObvF9EF9P19VbLHciKT7Lw4ciEO9UYf+d3ny/d2n43Gk9+pIHOgWB+LqPfff+8T/DA8N5t+iQTt1bPNJIytfJBHf7Dbq8vnFxYVX9qAht9F3ftofOHDDs/xjqfs8kzXydjOfrc5kad5uppMTE6VHzky30+m8nrXPtTvZbFprZdVOs5WerJ1Ky5OT42k2dq4535iZqtazwcjHH66UShPp02NzWbXVbjYeeXqsXTuT1+t5Y6aIqZRej27M490N8Zm8k3ay6myaXry0uDC+XVO7QeVVY/av2nCOPHTvx6999NdLC90NcrNKkv6GWSmXK5XyxGOTjz1eKg1XSpXVI0prxPWIGIroRuzJRsuddc8G44b7W8y6CRFL/707O2+4RUP9/B/1yKMR83E20khjqHhefoxELaaiFc2Y7b7+3cia6evy//8/8qffbLXclfl/kOUPLU8+HEX+P9p7dXSz/L+uFXv5aLzfa83Kca/GG3E1Lsf5WIzFWIhXdlLzvrW17uFjaHfrm4ksGpFHO5qRx2xUizFpf0wakzERE1GKZ+NMTEc70piOPOqRRTvORTs6kRVbVC1akUU1OtGMVqRxMmpxKtIox2RMxnikkcVYnItmzEcjZmIqqkUtF+NSsd7H17Tr/m8895MXfvvxO93h60HlLTqSdD/MdYP+skXQunR/E/l/ECH/f9Yc6O+zbjR+F/fecGuWivw/fKebAQAAAOyhpPj2PYmIkXigGJrO69lX7nSzAAAAgF1U/K75SLcY6Q49EEn3+L+0QeSHt71tAAAAwO5IinPskogYjQd7Q4PTpTb6EgAAAAD4D1T8/f9otxiNeLMY4fgfAAAAPmO+tdk19j/a17/Gbntuf/KzP0erNZJcmzv7UHKl2o2rXrmrN1+/+PL1GjvTh5OD/UqKYmL46j1JRAzXsiPJ4OqX/9rfKz8png8vX4Bws2v9J9s0ILZuQPEqvhvHejHHLvTKC4MpvaWMTuf1bKzWrD9RTvpfjnRee/HS16Lo/rcbsweTuHhpcWHs+ZcWLxRtudat5dqV/uXhk8FcEb0TKrZoy1J/DcQDG/d4pDgRo7/c0d5ySyv7P9SbfWjr/icrl/lWHO/FHB/tlaOr+3+gu8zy2BPlqFYPDnWys53Xllb0vt+K8kY9v4l34a040Ys5cfJEr9igFZVVrXhxfSsqK1txY+vihlvxzrE3z/7tl80kG9+uFeO32AqAO+VicdWf5Sx0d5GF/rnU001oa/Lu3YM5b2Yvd3H5U8Zg/hW5bjjWZfd0J9n9rTjZiznZ+zwxfHiDvFLaYI/+8qWXf9Xfoz/63g9/9NWjv/5g59ntvTjVi+kXcd8vNsmx3T5/b01Wfbc7x7ubLrddryQxEnclvZsPxdWHL105/8LCCwsvVirjE6VHS6XHKjFSfFToF5u0VOYB+Hzb7h47H3z9euhmd+FJHt3mqPq+6z8pGIvn46VYjAtxujjbICIe3LjW0RU/Qzi9zVHr6Io7vJze5thyObayNnb/iSQ2iR1fscb+7wdF8fc9ekMA4DY4vk0eTgafEF7/r/4cayLuSpLT2xx3r87lp3o3zh0cHcfmuXwjX9zj9QEAnwdZ65NktPN20mrlc8+WJyfL1c6ZLG01a8+krXxqJkvzRidr1c5UGzNZOtdqdpq1wVfHU1k7bc/PzTVbnXS62Urnmu38bHHn97R/6/d2NlttdPJae66eVdtZWms2OtVaJ53K27V0bv6pet4+k7WKmdtzWS2fzmvVTt5spO3mfKuWjaVpO8tWBOZTWaOTT+fZSJo30rlWPlttXYuI+vxslk5l7Vorn+s0exUOlpU3pput2aLasfXd/+PtXt8A8Gnw6htXL59fXFx4ZWcDv7+R4DvdRwBgNVkaAAAAAAAAAAAAAAA+/dafrtcde1MnAo7Ejk8ffHV/3MrZh5+9gS+833tbdqPCW6nn7lXv6b7+xnLn189NDzz35JOXl8ckwytX71NvHjrzhywGvduino3/p2x0quvbByP2/fj7vTFf2iQ4Gd7lnn4YETuYfSnZIub274sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv/DgAA//9CP1Gw") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000002600)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48c94c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a525b8af6d4cb851af71a8306e0742225bb0725bb136baf5f84ab3a5414d71359f08da46778afb010f8cd69fa84aa53ec75708eac56152a47b4b86b2e343ce06c9d095ff41f46d38226351d3f31cfd20dcb3ab92ddf535e29ef10d2368348c10471b183a3e6436a9cf666b79c64c2e1e22f16c0c5849175e450aecb83e37c45bacb2b8f9c334e9da73975704b960ab1760512527a8550fb013b799676e4ce549280c2226043b0d36c427dd3a5c7c3a0e83b165dc60e4353559b01d97f2e1d72a328714ec283c67add462d0b38a471f18d619786311dd39a27a3c5a629230ba6eb5bc3c06a82c3bdfec622d67a2f4b7a15421b8f03e8eb568e075654805c6a05e2843debcc9b162b919f66360aea383e01c7d730d4113e4448f7d4c8fed9fa59c9d0cdc39d3fa82533825c872c00c46fc2a9896424de91fa0043e5b7ba77eb655d42798bb22", @ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) close(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000020000001400018005000200"], 0x28}}, 0x0) 0s ago: executing program 1 (id=320): perf_event_open(&(0x7f0000000000)={0x1, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10848a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r3, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @private}, @address_reply}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): e bring it up to get a fully working HSR network [ 28.595414][ T3275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.621296][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.637159][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.652629][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.692303][ T3271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.702820][ T3271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.720003][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.727203][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.737290][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.744522][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.783338][ T3275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.856211][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.870489][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.920766][ T3267] veth0_vlan: entered promiscuous mode [ 28.941134][ T3266] veth0_vlan: entered promiscuous mode [ 28.950434][ T3267] veth1_vlan: entered promiscuous mode [ 28.961967][ T3266] veth1_vlan: entered promiscuous mode [ 28.994777][ T3266] veth0_macvtap: entered promiscuous mode [ 29.010458][ T3267] veth0_macvtap: entered promiscuous mode [ 29.018617][ T3266] veth1_macvtap: entered promiscuous mode [ 29.036568][ T3267] veth1_macvtap: entered promiscuous mode [ 29.060451][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.078934][ T3273] veth0_vlan: entered promiscuous mode [ 29.088071][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.098624][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.109812][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.119861][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.133803][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.144489][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.155025][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.166520][ T3266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.175436][ T3266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.184245][ T3266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.193051][ T3266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.213565][ T3267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.222487][ T3267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.231282][ T3267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.240044][ T3267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.250919][ T3273] veth1_vlan: entered promiscuous mode [ 29.259697][ T3271] veth0_vlan: entered promiscuous mode [ 29.272643][ T3275] veth0_vlan: entered promiscuous mode [ 29.285555][ T3275] veth1_vlan: entered promiscuous mode [ 29.298037][ T3271] veth1_vlan: entered promiscuous mode [ 29.303576][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 29.303588][ T29] audit: type=1400 audit(1729770052.301:110): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.EuMnVv/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.334166][ T29] audit: type=1400 audit(1729770052.301:111): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.356256][ T29] audit: type=1400 audit(1729770052.301:112): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.EuMnVv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.381615][ T29] audit: type=1400 audit(1729770052.301:113): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.403562][ T29] audit: type=1400 audit(1729770052.301:114): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.EuMnVv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.430265][ T29] audit: type=1400 audit(1729770052.301:115): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.EuMnVv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.457694][ T29] audit: type=1400 audit(1729770052.301:116): avc: denied { unmount } for pid=3267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.478715][ T29] audit: type=1400 audit(1729770052.481:117): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.517068][ T3267] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.524019][ T3271] veth0_macvtap: entered promiscuous mode [ 29.550788][ T29] audit: type=1400 audit(1729770052.551:118): avc: denied { read write } for pid=3267 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.553429][ T3271] veth1_macvtap: entered promiscuous mode [ 29.587655][ T29] audit: type=1400 audit(1729770052.591:119): avc: denied { open } for pid=3267 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.614623][ T3273] veth0_macvtap: entered promiscuous mode [ 29.626509][ T3408] loop1: detected capacity change from 0 to 512 [ 29.646459][ T3406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.646627][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.663252][ T3406] loop2: detected capacity change from 0 to 512 [ 29.668703][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.668719][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.695202][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.705880][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.713962][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.724499][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.734341][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.744813][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.755417][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.763218][ T3275] veth0_macvtap: entered promiscuous mode [ 29.775379][ T3273] veth1_macvtap: entered promiscuous mode [ 29.784808][ T3406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.799059][ T3275] veth1_macvtap: entered promiscuous mode [ 29.805477][ T3408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.805971][ T3406] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.819859][ T3271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.830241][ T3408] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.836905][ T3271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.855843][ T3271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.864644][ T3271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.885773][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.896383][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.906243][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.916699][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.926527][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.937045][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.947655][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.955872][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.966433][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.976303][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.986800][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.996636][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.007085][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.017614][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.026719][ T3275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.035515][ T3275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.044319][ T3275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.053197][ T3275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.062463][ T3406] syz.2.3 (3406) used greatest stack depth: 10736 bytes left [ 30.067330][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.080482][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.090317][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.100896][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.110871][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.121411][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.131309][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.141839][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.153681][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.154503][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.199311][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.207602][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.209809][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.209828][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.239077][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.248903][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.259373][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.269253][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.279861][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.291712][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.326963][ T3273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.335718][ T3273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.344488][ T3273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.353272][ T3273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.532870][ T3432] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7'. [ 31.637116][ T3429] loop0: detected capacity change from 0 to 2048 [ 31.820530][ T3429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.840493][ T3445] loop3: detected capacity change from 0 to 1024 [ 31.856030][ T3445] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 31.865963][ T3445] EXT4-fs (loop3): group descriptors corrupted! [ 31.881389][ T3429] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 31.893793][ T3429] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.893793][ T3429] [ 31.903481][ T3429] EXT4-fs (loop0): Total free blocks count 0 [ 31.909588][ T3429] EXT4-fs (loop0): Free/Dirty block details [ 31.915500][ T3429] EXT4-fs (loop0): free_blocks=0 [ 31.920504][ T3429] EXT4-fs (loop0): dirty_blocks=0 [ 31.925625][ T3429] EXT4-fs (loop0): Block reservation details [ 31.931685][ T3429] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 31.987387][ T3429] syz.0.1 (3429) used greatest stack depth: 10384 bytes left [ 32.028590][ T3449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 32.131740][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.247987][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.281988][ T3452] batadv_slave_0: entered promiscuous mode [ 32.409068][ T3445] loop3: detected capacity change from 0 to 256 [ 32.452839][ T3460] loop0: detected capacity change from 0 to 2048 [ 32.490719][ T3463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 32.577862][ T3465] loop4: detected capacity change from 0 to 2048 [ 32.584481][ T3465] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 32.650420][ T3471] netlink: '+}[@': attribute type 10 has an invalid length. [ 32.662142][ C0] hrtimer: interrupt took 48522 ns [ 32.679707][ T3471] team0: Port device netdevsim1 added [ 32.904737][ T3483] mmap: syz.1.23 (3483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.949104][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 32.967393][ T3483] loop1: detected capacity change from 0 to 512 [ 33.005450][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.042556][ T3483] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.108493][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.114275][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.120135][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.125948][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.131765][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.137483][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.143220][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.148974][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.154664][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.160435][ T3494] blackhole_netdev_xmit(): Dropping skb. [ 33.186446][ T3483] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.23: corrupted inode contents [ 33.228099][ T3483] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.23: mark_inode_dirty error [ 33.239726][ T3483] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.23: corrupted inode contents [ 33.258326][ T3483] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.23: mark_inode_dirty error [ 33.278545][ T3483] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.23: mark inode dirty (error -117) [ 33.299414][ T3483] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 33.347641][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.415543][ T3496] loop1: detected capacity change from 0 to 128 [ 33.444714][ T3496] syz.1.25: attempt to access beyond end of device [ 33.444714][ T3496] loop1: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 33.533324][ T3498] loop1: detected capacity change from 0 to 1024 [ 33.548976][ T3498] EXT4-fs: Ignoring removed orlov option [ 33.554776][ T3498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.623224][ T3498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.653309][ T3502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3502 comm=syz.4.27 [ 33.694520][ T3502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.27'. [ 33.703997][ T3502] unsupported nlmsg_type 40 [ 33.712976][ T3498] EXT4-fs (loop1): shut down requested (0) [ 33.732655][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.812638][ T3506] dvmrp0: entered allmulticast mode [ 33.818572][ T3508] pim6reg1: entered promiscuous mode [ 33.823915][ T3508] pim6reg1: entered allmulticast mode [ 33.836879][ T3506] dvmrp0: left allmulticast mode [ 33.897932][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 34.018597][ T3517] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.019767][ T3516] loop0: detected capacity change from 0 to 512 [ 34.030354][ T3517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 34.053956][ T3516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.085804][ T3516] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.144358][ T3523] ======================================================= [ 34.144358][ T3523] WARNING: The mand mount option has been deprecated and [ 34.144358][ T3523] and is ignored by this kernel. Remove the mand [ 34.144358][ T3523] option from the mount to silence this warning. [ 34.144358][ T3523] ======================================================= [ 34.286082][ T3529] __vm_enough_memory: pid: 3529, comm: syz.3.36, bytes: 4503599627366400 not enough memory for the allocation [ 34.302202][ T3529] syz.3.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.363579][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 34.363596][ T29] audit: type=1400 audit(1729770057.361:323): avc: denied { unmount } for pid=3266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.590505][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.608902][ T29] audit: type=1400 audit(1729770057.611:324): avc: denied { execmem } for pid=3531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.658344][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.667865][ T29] audit: type=1400 audit(1729770057.641:325): avc: denied { mounton } for pid=3532 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 34.689598][ T29] audit: type=1400 audit(1729770057.641:326): avc: denied { module_request } for pid=3532 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 34.711609][ T29] audit: type=1400 audit(1729770057.651:327): avc: denied { unmount } for pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.735791][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.760647][ T29] audit: type=1400 audit(1729770057.681:328): avc: denied { sys_module } for pid=3532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 34.792223][ T3540] capability: warning: `syz.4.42' uses deprecated v2 capabilities in a way that may be insecure [ 34.802751][ T29] audit: type=1326 audit(1729770057.791:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 34.809553][ T3543] loop0: detected capacity change from 0 to 2048 [ 34.825903][ T29] audit: type=1326 audit(1729770057.791:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 34.825940][ T29] audit: type=1326 audit(1729770057.791:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d7760c990 code=0x7ffc0000 [ 34.879215][ T29] audit: type=1400 audit(1729770057.791:332): avc: denied { write } for pid=3539 comm="syz.4.42" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.930232][ T3543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.947402][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.974977][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 35.012585][ T3549] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.021497][ T3549] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.030481][ T3549] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.039418][ T3549] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.111122][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.163121][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.266995][ T3563] pim6reg1: entered promiscuous mode [ 35.272901][ T3563] pim6reg1: entered allmulticast mode [ 35.319026][ T3532] chnl_net:caif_netlink_parms(): no params data found [ 35.446213][ T11] bridge_slave_1: left allmulticast mode [ 35.451941][ T11] bridge_slave_1: left promiscuous mode [ 35.457691][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.552550][ T11] bridge_slave_0: left allmulticast mode [ 35.558309][ T11] bridge_slave_0: left promiscuous mode [ 35.564070][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.679817][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.691013][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.701425][ T11] bond0 (unregistering): Released all slaves [ 35.754313][ T3592] loop0: detected capacity change from 0 to 128 [ 35.765537][ T3592] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.779117][ T3592] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.791179][ T11] hsr_slave_0: left promiscuous mode [ 35.801567][ T11] hsr_slave_1: left promiscuous mode [ 35.807872][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.815341][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.825335][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.832873][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.910026][ T11] veth1_macvtap: left promiscuous mode [ 35.915707][ T11] veth0_macvtap: left promiscuous mode [ 35.921391][ T11] veth1_vlan: left promiscuous mode [ 35.926688][ T11] veth0_vlan: left promiscuous mode [ 36.244651][ T11] team0 (unregistering): Port device team_slave_1 removed [ 36.259975][ T11] team0 (unregistering): Port device team_slave_0 removed [ 36.999375][ T3271] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.018484][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.025633][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.033119][ T3532] bridge_slave_0: entered allmulticast mode [ 37.036518][ T3606] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.039943][ T3532] bridge_slave_0: entered promiscuous mode [ 37.057818][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.064968][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.072237][ T3532] bridge_slave_1: entered allmulticast mode [ 37.078777][ T3532] bridge_slave_1: entered promiscuous mode [ 37.144065][ T3532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.159748][ T3532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.161954][ T3608] loop4: detected capacity change from 0 to 4096 [ 37.183015][ T3608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.210686][ T3532] team0: Port device team_slave_0 added [ 37.218501][ T3532] team0: Port device team_slave_1 added [ 37.225296][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.258991][ T3532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.266060][ T3532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.292051][ T3532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.305305][ T3532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.312523][ T3532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.315945][ T3630] loop2: detected capacity change from 0 to 128 [ 37.338514][ T3532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.360233][ T3630] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000êF’¡QÚÿ&Aƒ5ù`ýRn“œ¬€ˆ¿«p~æ0pÿ5çßC•ZVcîYä†ü|wðþ»ëÅ_ƒ3ÚúØ‚cqÙâ’þ£ŠIºOÉ.Öaæ°‰š¼Ùèù' [ 37.373160][ T3631] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.54: corrupted inode contents [ 37.421323][ T3631] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.54: mark_inode_dirty error [ 37.433909][ T3532] hsr_slave_0: entered promiscuous mode [ 37.440578][ T3532] hsr_slave_1: entered promiscuous mode [ 37.446619][ T3631] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.54: corrupted inode contents [ 37.461111][ T3532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.468827][ T3532] Cannot create hsr debugfs directory [ 37.480713][ T3631] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.54: mark_inode_dirty error [ 37.512089][ T3631] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.54: corrupted inode contents [ 37.534319][ T3631] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.54: mark_inode_dirty error [ 37.568254][ T3631] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.54: corrupted inode contents [ 37.598845][ T3631] EXT4-fs error (device loop4): ext4_truncate:4208: inode #15: comm syz.4.54: mark_inode_dirty error [ 37.610911][ T3631] EXT4-fs error (device loop4) in ext4_setattr:5523: Corrupt filesystem [ 37.623701][ T3608] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.54: corrupted inode contents [ 37.641619][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.654092][ T3630] batadv_slave_0: entered promiscuous mode [ 37.671265][ T3275] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 37.685390][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.002003][ T3532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.032888][ T3532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.061668][ T3532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.083894][ T3682] hub 8-0:1.0: USB hub found [ 38.084518][ T3532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.088688][ T3682] hub 8-0:1.0: 8 ports detected [ 38.184155][ T3532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.215051][ T3532] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.284069][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.291221][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.321430][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.328633][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.387636][ T3699] syz.0.62[3699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.387807][ T3699] syz.0.62[3699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.399080][ T3699] syz.0.62[3699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.716548][ T3532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.738295][ T3532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.760748][ T3706] loop2: detected capacity change from 0 to 128 [ 38.785835][ T3706] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 38.810718][ T3532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.899493][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 38.966549][ T3532] veth0_vlan: entered promiscuous mode [ 38.988603][ T3532] veth1_vlan: entered promiscuous mode [ 39.103534][ T3532] veth0_macvtap: entered promiscuous mode [ 39.123863][ T3532] veth1_macvtap: entered promiscuous mode [ 39.170480][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.180990][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.190914][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.201449][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.229075][ T3532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.233482][ T3663] syz.4.59 (3663) used greatest stack depth: 10120 bytes left [ 39.236538][ T3745] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 39.252600][ T3745] bond0: (slave bond_slave_0): Releasing backup interface [ 39.283756][ T3744] tipc: Started in network mode [ 39.288725][ T3744] tipc: Node identity a2c788b2372f, cluster identity 4711 [ 39.295934][ T3744] tipc: Enabled bearer , priority 0 [ 39.308903][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.319432][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.329287][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.339792][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.349653][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.360155][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.370003][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.380540][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.383998][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 39.384014][ T29] audit: type=1400 audit(1729770062.351:500): avc: denied { ioctl } for pid=3738 comm="syz.0.66" path="socket:[5228]" dev="sockfs" ino=5228 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.395529][ T3532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.429375][ T3739] ªªªªªª: renamed from syzkaller0 [ 39.435827][ T3739] tipc: Disabling bearer [ 39.449829][ T3532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.458671][ T3532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.467422][ T3532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.476134][ T3532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.501482][ T29] audit: type=1400 audit(1729770062.501:501): avc: denied { mounton } for pid=3532 comm="syz-executor" path="/root/syzkaller.ac64bd/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.534836][ T29] audit: type=1400 audit(1729770062.501:502): avc: denied { mount } for pid=3532 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.556990][ T29] audit: type=1400 audit(1729770062.501:503): avc: denied { mount } for pid=3532 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.579195][ T29] audit: type=1400 audit(1729770062.501:504): avc: denied { mounton } for pid=3532 comm="syz-executor" path="/root/syzkaller.ac64bd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.605937][ T29] audit: type=1400 audit(1729770062.501:505): avc: denied { mounton } for pid=3532 comm="syz-executor" path="/root/syzkaller.ac64bd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.633696][ T29] audit: type=1400 audit(1729770062.531:506): avc: denied { mounton } for pid=3532 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.657207][ T29] audit: type=1400 audit(1729770062.551:507): avc: denied { create } for pid=3760 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.676523][ T29] audit: type=1400 audit(1729770062.551:508): avc: denied { bind } for pid=3760 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.695696][ T29] audit: type=1400 audit(1729770062.551:509): avc: denied { listen } for pid=3760 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.705451][ T3672] syz.4.59 (3672) used greatest stack depth: 7464 bytes left [ 39.790926][ T3770] : port 1(erspan0) entered blocking state [ 39.796994][ T3770] : port 1(erspan0) entered disabled state [ 39.803502][ T3770] erspan0: entered allmulticast mode [ 39.810537][ T3770] erspan0: entered promiscuous mode [ 39.826659][ T3775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.71'. [ 39.836407][ T3770] : port 1(erspan0) entered blocking state [ 39.841593][ T3775] loop4: detected capacity change from 0 to 512 [ 39.842475][ T3770] : port 1(erspan0) entered forwarding state [ 39.893602][ T3781] loop1: detected capacity change from 0 to 128 [ 39.908526][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.923439][ T3775] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.938484][ T3775] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.71: corrupted inode contents [ 39.950675][ T3775] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.71: mark_inode_dirty error [ 39.963050][ T3775] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.71: corrupted inode contents [ 39.977118][ T3775] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.71: mark_inode_dirty error [ 39.982773][ T3772] syz.1.73: attempt to access beyond end of device [ 39.982773][ T3772] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 40.436388][ T3787] dvmrp8: entered allmulticast mode [ 40.444104][ T3787] dvmrp8: left allmulticast mode [ 40.525655][ T3789] loop0: detected capacity change from 0 to 128 [ 40.619168][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.648892][ T3797] loop4: detected capacity change from 0 to 512 [ 40.668086][ T3797] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 40.676626][ T3797] System zones: 0-2, 18-18, 34-34 [ 40.682654][ T3797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.82: bg 0: block 248: padding at end of block bitmap is not set [ 40.697236][ T3797] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.82: Failed to acquire dquot type 1 [ 40.709241][ T3797] EXT4-fs (loop4): 1 truncate cleaned up [ 40.715224][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.727939][ T3797] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.818148][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.855493][ T3802] wireguard0: entered promiscuous mode [ 40.861161][ T3802] wireguard0: entered allmulticast mode [ 41.783323][ T3823] loop4: detected capacity change from 0 to 512 [ 41.822424][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.836288][ T3823] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.891603][ T3823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.923906][ T3823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.943618][ T3823] bond0 (unregistering): Released all slaves [ 41.968579][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.015663][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.083962][ T3827] chnl_net:caif_netlink_parms(): no params data found [ 42.127095][ T3827] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.134258][ T3827] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.141694][ T3827] bridge_slave_0: entered allmulticast mode [ 42.148362][ T3827] bridge_slave_0: entered promiscuous mode [ 42.155091][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.162213][ T3827] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.169447][ T3827] bridge_slave_1: entered allmulticast mode [ 42.175900][ T3827] bridge_slave_1: entered promiscuous mode [ 42.184900][ T3845] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 42.193745][ T3845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 42.202712][ T3845] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 42.211655][ T3845] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 42.229007][ T3827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.239623][ T3827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.259542][ T3827] team0: Port device team_slave_0 added [ 42.265912][ T3827] team0: Port device team_slave_1 added [ 42.287827][ T3827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.288386][ T3847] loop0: detected capacity change from 0 to 512 [ 42.294808][ T3827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.327050][ T3827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.338536][ T3827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.338753][ T3847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.345554][ T3827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.345582][ T3827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.385757][ T3847] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.431506][ T3851] loop2: detected capacity change from 0 to 512 [ 42.438293][ T3827] hsr_slave_0: entered promiscuous mode [ 42.444443][ T3827] hsr_slave_1: entered promiscuous mode [ 42.450677][ T3827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.459874][ T3851] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.93: iget: bogus i_mode (0) [ 42.462510][ T3827] Cannot create hsr debugfs directory [ 42.484132][ T3851] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.93: couldn't read orphan inode 17 (err -117) [ 42.496839][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.513414][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.526119][ T3851] xt_CT: No such helper "pptp" [ 42.579001][ T3856] loop0: detected capacity change from 0 to 1024 [ 42.608316][ T3856] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.618887][ T3856] JBD2: no valid journal superblock found [ 42.619748][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.624611][ T3856] EXT4-fs (loop0): Could not load journal inode [ 42.649059][ T3856] loop0: detected capacity change from 0 to 128 [ 42.701799][ T3860] loop2: detected capacity change from 0 to 764 [ 42.842031][ T3864] loop0: detected capacity change from 0 to 164 [ 42.873798][ T3860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.884143][ T3860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 42.931129][ T3860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.941486][ T3860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 43.029591][ T3860] team0: Port device netdevsim1 removed [ 43.036705][ T3860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.047121][ T3860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 43.059893][ T3870] can0: slcan on ptm0. [ 43.151217][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.266179][ T3860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.276543][ T3860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 43.381213][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.448423][ T3860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 43.456766][ T3860] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 43.476630][ T3860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 43.485097][ T3860] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 43.511747][ T3860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 43.520204][ T3860] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 43.532506][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.552550][ T3860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 43.561018][ T3860] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 43.625761][ T28] bridge_slave_1: left allmulticast mode [ 43.631580][ T28] bridge_slave_1: left promiscuous mode [ 43.637573][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.645932][ T28] bridge_slave_0: left allmulticast mode [ 43.651745][ T28] bridge_slave_0: left promiscuous mode [ 43.657668][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.049231][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.059937][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.070496][ T28] bond0 (unregistering): Released all slaves [ 44.291672][ T28] hsr_slave_0: left promiscuous mode [ 44.299296][ T28] hsr_slave_1: left promiscuous mode [ 44.305331][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.312833][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.327240][ T3870] can0 (unregistered): slcan off ptm0. [ 44.376291][ T4018] loop4: detected capacity change from 0 to 128 [ 44.392819][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.400348][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.413508][ T4018] msdos: Unknown parameter 'ÿ' [ 44.461885][ T28] veth1_macvtap: left promiscuous mode [ 44.467525][ T28] veth0_macvtap: left promiscuous mode [ 44.473145][ T28] veth1_vlan: left promiscuous mode [ 44.478513][ T28] veth0_vlan: left promiscuous mode [ 44.502399][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 44.502416][ T29] audit: type=1400 audit(1729770067.501:1036): avc: denied { create } for pid=4023 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.535628][ C1] net_ratelimit: 595 callbacks suppressed [ 44.535642][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 44.557321][ T29] audit: type=1400 audit(1729770067.501:1037): avc: denied { execute } for pid=4023 comm="syz.4.103" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 44.618602][ T29] audit: type=1400 audit(1729770067.561:1038): avc: denied { connect } for pid=4023 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.638437][ T29] audit: type=1400 audit(1729770067.621:1039): avc: denied { setopt } for pid=4023 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.721298][ T28] team0 (unregistering): Port device team_slave_1 removed [ 44.733147][ T28] team0 (unregistering): Port device team_slave_0 removed [ 44.747838][ T4032] loop0: detected capacity change from 0 to 512 [ 44.781065][ T29] audit: type=1400 audit(1729770067.781:1040): avc: denied { create } for pid=4036 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 44.816821][ T29] audit: type=1400 audit(1729770067.781:1041): avc: denied { getopt } for pid=4036 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 44.854534][ T4032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.868583][ T4032] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.896507][ T4032] serio: Serial port ptm0 [ 44.903555][ T29] audit: type=1326 audit(1729770067.891:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69201dff9 code=0x7ffc0000 [ 44.927075][ T29] audit: type=1326 audit(1729770067.891:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69201dff9 code=0x7ffc0000 [ 44.950406][ T29] audit: type=1326 audit(1729770067.891:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fb69201dff9 code=0x7ffc0000 [ 44.973771][ T29] audit: type=1326 audit(1729770067.891:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69201dff9 code=0x7ffc0000 [ 45.008560][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.046418][ T4061] loop0: detected capacity change from 0 to 1024 [ 45.075728][ T4061] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.108397][ T4063] loop4: detected capacity change from 0 to 256 [ 45.115788][ T4063] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.190060][ T4066] loop2: detected capacity change from 0 to 164 [ 45.201033][ T4061] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.211108][ T4063] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.274707][ T4066] syz.2.110: attempt to access beyond end of device [ 45.274707][ T4066] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 45.294678][ T4061] EXT4-fs (loop0): too many log groups per flexible block group [ 45.302455][ T4061] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 45.353379][ T4066] syz.2.110: attempt to access beyond end of device [ 45.353379][ T4066] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.402727][ T4061] EXT4-fs (loop0): mount failed [ 45.413478][ T3827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.458905][ T3827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.496043][ T3827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.583212][ T3827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.597988][ T4088] loop2: detected capacity change from 0 to 512 [ 45.629373][ T4076] loop0: detected capacity change from 0 to 8192 [ 45.654963][ T4088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.677612][ T4088] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.692895][ T4088] Process accounting resumed [ 45.718320][ T4088] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 45.838970][ T4103] loop0: detected capacity change from 0 to 512 [ 45.863680][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.885086][ T3827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.927166][ T4116] loop2: detected capacity change from 0 to 128 [ 45.934963][ T3827] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.941784][ T4103] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 45.948817][ T4116] FAT-fs (loop2): Directory bread(block 160) failed [ 45.957468][ T4116] FAT-fs (loop2): Directory bread(block 161) failed [ 45.965058][ T4116] FAT-fs (loop2): Directory bread(block 162) failed [ 45.972032][ T4116] FAT-fs (loop2): Directory bread(block 163) failed [ 45.979726][ T4116] FAT-fs (loop2): Directory bread(block 164) failed [ 45.992165][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.999357][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.013300][ T4116] FAT-fs (loop2): Directory bread(block 165) failed [ 46.025466][ T4116] FAT-fs (loop2): Directory bread(block 166) failed [ 46.038131][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.038295][ T4116] FAT-fs (loop2): Directory bread(block 167) failed [ 46.045226][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.136126][ T4081] chnl_net:caif_netlink_parms(): no params data found [ 46.219942][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.227321][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.239065][ T4081] bridge_slave_0: entered allmulticast mode [ 46.246714][ T4081] bridge_slave_0: entered promiscuous mode [ 46.264304][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.271457][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.285380][ T4081] bridge_slave_1: entered allmulticast mode [ 46.292358][ T4081] bridge_slave_1: entered promiscuous mode [ 46.311123][ T4148] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 46.322706][ T4148] team0: Port device netdevsim1 added [ 46.331821][ T3827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.378186][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.390673][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.415077][ T4081] team0: Port device team_slave_0 added [ 46.421996][ T4081] team0: Port device team_slave_1 added [ 46.438321][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.445325][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.471365][ T4081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.482466][ T4170] loop0: detected capacity change from 0 to 512 [ 46.488141][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.495756][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.521798][ T4081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.550073][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.564353][ T4170] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.590331][ T4174] loop2: detected capacity change from 0 to 256 [ 46.601138][ T4170] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #12: comm syz.0.121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.632237][ T4170] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #12: comm syz.0.121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.643211][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 46.658820][ T4174] FAT-fs (loop2): Filesystem has been set read-only [ 46.671110][ T4174] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 46.684036][ T4081] hsr_slave_0: entered promiscuous mode [ 46.692545][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 46.702075][ T4174] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 46.715744][ T4081] hsr_slave_1: entered promiscuous mode [ 46.726432][ T4081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.727369][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.734204][ T4081] Cannot create hsr debugfs directory [ 46.763718][ T3827] veth0_vlan: entered promiscuous mode [ 46.771928][ T3827] veth1_vlan: entered promiscuous mode [ 46.785012][ T3827] veth0_macvtap: entered promiscuous mode [ 46.792581][ T3827] veth1_macvtap: entered promiscuous mode [ 46.802435][ T3827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.812919][ T3827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.822778][ T3827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.833315][ T3827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.844107][ T3827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.883055][ T3827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.893576][ T3827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.903454][ T3827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.914000][ T3827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.922048][ T4184] Zero length message leads to an empty skb [ 46.923893][ T3827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.940242][ T3827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.950112][ T3827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.960781][ T3827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.972065][ T3827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.980858][ T3827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.989670][ T3827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.998485][ T3827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.007303][ T3827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.052928][ T4186] loop0: detected capacity change from 0 to 512 [ 47.070269][ T4186] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.083422][ T4186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.122997][ T4194] loop2: detected capacity change from 0 to 512 [ 47.134362][ T4186] EXT4-fs (loop0): 1 truncate cleaned up [ 47.137994][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 47.179604][ T4186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.205750][ T4186] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.124: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 47.234269][ T4186] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 47.245057][ T4200] syz.4.129[4200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.245196][ T4200] syz.4.129[4200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.246004][ T4081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.256649][ T4200] syz.4.129[4200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.279452][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.324604][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.333610][ T4200] tipc: Started in network mode [ 47.333641][ T4200] tipc: Node identity 0228a3ab2712, cluster identity 4711 [ 47.333695][ T4200] tipc: Enabled bearer , priority 0 [ 47.371933][ T4202] dccp_close: ABORT with 20 bytes unread [ 47.405986][ T4204] loop0: detected capacity change from 0 to 2048 [ 47.406056][ T4081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.420020][ T4206] loop2: detected capacity change from 0 to 256 [ 47.431222][ T4200] ªªªªªª: renamed from syzkaller0 [ 47.449877][ T4200] tipc: Disabling bearer [ 47.472216][ T4204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.544368][ T4081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.568701][ T4211] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.131: bg 0: block 234: padding at end of block bitmap is not set [ 47.588730][ T4211] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 47.589658][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.608606][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.608606][ T28] [ 47.618265][ T28] EXT4-fs (loop0): Total free blocks count 0 [ 47.624306][ T28] EXT4-fs (loop0): Free/Dirty block details [ 47.630293][ T28] EXT4-fs (loop0): free_blocks=0 [ 47.635244][ T28] EXT4-fs (loop0): dirty_blocks=3888 [ 47.640574][ T28] EXT4-fs (loop0): Block reservation details [ 47.646642][ T28] EXT4-fs (loop0): i_reserved_data_blocks=243 [ 47.658731][ T4081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.815916][ T4213] xt_CT: No such helper "syz1" [ 47.841487][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 47.907249][ T4081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.961833][ T4081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.024394][ T4081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.036204][ T4081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.100970][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.121262][ T4081] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.131315][ T3988] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.138489][ T3988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.152818][ T3988] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.159965][ T3988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.273500][ T4081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.393510][ T4233] process 'syz.2.136' launched './file1' with NULL argv: empty string added [ 48.493095][ T4081] veth0_vlan: entered promiscuous mode [ 48.540576][ T4081] veth1_vlan: entered promiscuous mode [ 48.570064][ T4081] veth0_macvtap: entered promiscuous mode [ 48.579465][ T4081] veth1_macvtap: entered promiscuous mode [ 48.599874][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.610391][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.620293][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.630770][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.640653][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.651193][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.667484][ T4240] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 48.674099][ T4240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 48.681702][ T4240] vhci_hcd vhci_hcd.0: Device attached [ 48.688668][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.705482][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.709886][ T4240] loop2: detected capacity change from 0 to 512 [ 48.716084][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.732236][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.742715][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.742730][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.742768][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.742790][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.742805][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.742827][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.742843][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.755640][ T4240] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 48.764809][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.772994][ T4240] inode 11: block 64: [ 48.793883][ T4081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.803688][ T4240] freeing already freed block (bit 63); block bitmap corrupt. [ 48.812588][ T4240] EXT4-fs (loop2): 1 truncate cleaned up [ 48.813630][ T4081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.823494][ T4240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.828456][ T4081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.883821][ T4081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.926498][ T4244] loop4: detected capacity change from 0 to 2048 [ 48.938448][ T3342] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 48.973089][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.016915][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.150189][ T4260] loop3: detected capacity change from 0 to 512 [ 49.227081][ T4260] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.139: bg 0: block 248: padding at end of block bitmap is not set [ 49.272569][ T4260] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.139: Failed to acquire dquot type 1 [ 49.287765][ T4260] EXT4-fs (loop3): 1 truncate cleaned up [ 49.294466][ T4260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.506109][ T4260] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.530610][ T4241] vhci_hcd: connection reset by peer [ 49.537081][ T28] vhci_hcd: stop threads [ 49.541409][ T28] vhci_hcd: release socket [ 49.545838][ T28] vhci_hcd: disconnect device [ 49.583953][ T4275] hub 6-0:1.0: USB hub found [ 49.588908][ T4275] hub 6-0:1.0: 8 ports detected [ 49.612402][ T4274] @: renamed from vlan0 (while UP) [ 49.791746][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 49.791763][ T29] audit: type=1400 audit(1729770072.791:1299): avc: denied { write } for pid=4277 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.828320][ T29] audit: type=1400 audit(1729770072.831:1300): avc: denied { create } for pid=4277 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.850559][ T4278] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.867021][ T29] audit: type=1400 audit(1729770072.851:1301): avc: denied { write } for pid=4277 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.939931][ T29] audit: type=1326 audit(1729770072.941:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00b45dff9 code=0x7ffc0000 [ 49.983155][ T29] audit: type=1326 audit(1729770072.971:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00b45dff9 code=0x7ffc0000 [ 50.047819][ T4282] loop1: detected capacity change from 0 to 512 [ 50.063314][ T4282] EXT4-fs: Ignoring removed oldalloc option [ 50.071872][ T29] audit: type=1326 audit(1729770073.081:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa00b45dff9 code=0x7ffc0000 [ 50.097476][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.114446][ T4282] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.128329][ T4284] tipc: Cannot configure node identity twice [ 50.150752][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.172115][ T4282] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 50.201389][ T4282] EXT4-fs (loop1): 1 truncate cleaned up [ 50.210255][ T4282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.213307][ T4289] loop0: detected capacity change from 0 to 2048 [ 50.315158][ T4289] EXT4-fs (loop0): stripe (1021) is not aligned with cluster size (16), stripe is disabled [ 50.331446][ T3827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.353919][ T4289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.481707][ T4294] Illegal XDP return value 4291981592 on prog (id 132) dev N/A, expect packet loss! [ 50.504952][ T29] audit: type=1326 audit(1729770073.501:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.4.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x0 [ 50.592459][ T29] audit: type=1326 audit(1729770073.591:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 50.616040][ T29] audit: type=1326 audit(1729770073.591:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 50.639445][ T29] audit: type=1326 audit(1729770073.591:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 50.711997][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.726623][ T4303] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 50.739654][ T4081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.750871][ T3978] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:14: Failed to release dquot type 1 [ 51.043865][ T4310] tipc: Enabling of bearer rejected, failed to enable media [ 51.212116][ T4322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.750086][ T4333] loop7: detected capacity change from 0 to 16384 [ 51.763785][ T4333] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.778933][ T4336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=4336 comm=syz.4.163 [ 51.906662][ T4340] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 51.916259][ T4340] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 51.924729][ T4340] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 51.933158][ T4340] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 51.941630][ T4340] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 51.950039][ T4340] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 51.958499][ T4340] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 51.966929][ T4340] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 51.975351][ T4340] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 51.983855][ T4340] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 51.992248][ T4340] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 52.641507][ T4357] loop0: detected capacity change from 0 to 1024 [ 52.664785][ T4359] loop1: detected capacity change from 0 to 2048 [ 52.668633][ T4357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.692261][ T4357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.732521][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.815287][ T4367] hub 9-0:1.0: USB hub found [ 52.820567][ T4367] hub 9-0:1.0: 8 ports detected [ 53.250938][ T4376] syz.4.172 uses obsolete (PF_INET,SOCK_PACKET) [ 53.267526][ T4359] loop1: detected capacity change from 2048 to 0 [ 53.280300][ T4379] syz.1.169: attempt to access beyond end of device [ 53.280300][ T4379] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 53.320460][ T4379] syz.1.169: attempt to access beyond end of device [ 53.320460][ T4379] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 53.346312][ T4379] syz.1.169: attempt to access beyond end of device [ 53.346312][ T4379] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 53.397290][ T4379] syz.1.169: attempt to access beyond end of device [ 53.397290][ T4379] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 53.599930][ T4379] syz.1.169: attempt to access beyond end of device [ 53.599930][ T4379] loop1: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 53.619213][ T4391] capability: warning: `syz.3.178' uses 32-bit capabilities (legacy support in use) [ 53.638632][ T4393] loop4: detected capacity change from 0 to 256 [ 53.654720][ T4395] loop2: detected capacity change from 0 to 164 [ 53.662927][ T4379] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #19: block 6: comm syz.1.169: unable to read itable block [ 53.695891][ T4395] Unable to read rock-ridge attributes [ 53.719299][ T4395] Unable to read rock-ridge attributes [ 53.735050][ T4395] Unable to read rock-ridge attributes [ 53.739197][ T4379] syz.1.169: attempt to access beyond end of device [ 53.739197][ T4379] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 53.746903][ T4395] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.819102][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 53.826059][ T4379] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 53.899968][ T4405] loop4: detected capacity change from 0 to 1024 [ 53.919825][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 53.925975][ T4379] syz.1.169: attempt to access beyond end of device [ 53.925975][ T4379] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 53.947918][ T4407] bond2: entered promiscuous mode [ 53.953273][ T4407] bond2: entered allmulticast mode [ 53.957367][ T3342] usb 5-1: enqueue for inactive port 0 [ 53.963924][ T3342] usb 5-1: enqueue for inactive port 0 [ 53.966846][ T4407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.977872][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 53.981057][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 53.984668][ T4379] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.169: mark_inode_dirty error [ 54.009040][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.010181][ T4379] syz.1.169: attempt to access beyond end of device [ 54.010181][ T4379] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 54.039149][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.046121][ T4379] syz.1.169: attempt to access beyond end of device [ 54.046121][ T4379] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 54.066882][ T3342] vhci_hcd: vhci_device speed not set [ 54.077260][ T4379] syz.1.169: attempt to access beyond end of device [ 54.077260][ T4379] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 54.090954][ T4379] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #19: block 6: comm syz.1.169: unable to read itable block [ 54.103834][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.110790][ T4379] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 54.121534][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.128352][ T4379] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.169: mark_inode_dirty error [ 54.139587][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.146640][ T4379] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #19: block 6: comm syz.1.169: unable to read itable block [ 54.159636][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.166503][ T4379] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 54.221381][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.228276][ T4379] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.169: mark_inode_dirty error [ 54.241682][ T4379] EXT4-fs (loop1): I/O error while writing superblock [ 54.248608][ T4379] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #19: block 6: comm syz.1.169: unable to read itable block [ 54.290277][ T3978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.316304][ T4417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 54.328658][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 54.367697][ T3978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.440765][ T3978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.458763][ T4430] loop4: detected capacity change from 0 to 512 [ 54.471658][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.488941][ T4430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.509732][ T4430] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.523324][ T3978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.537671][ T4439] loop0: detected capacity change from 0 to 512 [ 54.548359][ T4434] ucma_write: process 160 (syz.2.195) changed security contexts after opening file descriptor, this is not allowed. [ 54.567576][ T4439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.596655][ T4439] EXT4-fs (loop0): 1 truncate cleaned up [ 54.605606][ T4439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.608857][ T4442] loop2: detected capacity change from 0 to 512 [ 54.643933][ T4442] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.196: bg 0: block 248: padding at end of block bitmap is not set [ 54.685833][ T4442] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.196: Failed to acquire dquot type 1 [ 54.698376][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.710501][ T3978] bridge_slave_1: left allmulticast mode [ 54.716317][ T3978] bridge_slave_1: left promiscuous mode [ 54.722132][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.730363][ T4442] EXT4-fs (loop2): 1 truncate cleaned up [ 54.732512][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.736666][ T4442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.758310][ T3978] bridge_slave_0: left allmulticast mode [ 54.764046][ T3978] bridge_slave_0: left promiscuous mode [ 54.767331][ T4442] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.769825][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.806672][ T4451] loop4: detected capacity change from 0 to 512 [ 54.813079][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 54.813092][ T29] audit: type=1326 audit(1729770077.791:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f486dcacd77 code=0x7ffc0000 [ 54.842649][ T29] audit: type=1326 audit(1729770077.801:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f486dcac990 code=0x7ffc0000 [ 54.866132][ T29] audit: type=1326 audit(1729770077.801:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 54.889561][ T29] audit: type=1326 audit(1729770077.801:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 54.913026][ T29] audit: type=1326 audit(1729770077.851:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 54.919693][ T4451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.936428][ T29] audit: type=1326 audit(1729770077.871:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 54.936465][ T29] audit: type=1326 audit(1729770077.871:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 54.973618][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.999351][ T4451] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.027157][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.038700][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.043724][ T29] audit: type=1326 audit(1729770078.041:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 55.072820][ T29] audit: type=1326 audit(1729770078.051:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 55.073979][ T3978] bond0 (unregistering): Released all slaves [ 55.096195][ T29] audit: type=1326 audit(1729770078.051:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 55.156344][ T3978] hsr_slave_0: left promiscuous mode [ 55.162350][ T3978] hsr_slave_1: left promiscuous mode [ 55.170966][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.178569][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.186210][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.196031][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.203581][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.221936][ T3978] veth1_macvtap: left promiscuous mode [ 55.227616][ T3978] veth0_macvtap: left promiscuous mode [ 55.233231][ T3978] veth1_vlan: left promiscuous mode [ 55.238588][ T3978] veth0_vlan: left promiscuous mode [ 55.269486][ T4471] loop2: detected capacity change from 0 to 1024 [ 55.289118][ T4471] EXT4-fs: Ignoring removed i_version option [ 55.335977][ T4471] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.366178][ T4471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.441647][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 55.480857][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 55.584468][ T4423] chnl_net:caif_netlink_parms(): no params data found [ 55.661575][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.668832][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.682519][ T4423] bridge_slave_0: entered allmulticast mode [ 55.696457][ T4423] bridge_slave_0: entered promiscuous mode [ 55.710738][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.717990][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.740905][ T4423] bridge_slave_1: entered allmulticast mode [ 55.753733][ T4423] bridge_slave_1: entered promiscuous mode [ 55.802060][ T4423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.843756][ T4423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.879011][ T4423] team0: Port device team_slave_0 added [ 55.885680][ T4423] team0: Port device team_slave_1 added [ 55.937966][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.945068][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.971231][ T4423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.020313][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.027332][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.053335][ T4423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.139074][ T4423] hsr_slave_0: entered promiscuous mode [ 56.157195][ T4423] hsr_slave_1: entered promiscuous mode [ 56.163374][ T4423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.176811][ T4423] Cannot create hsr debugfs directory [ 56.239359][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.274724][ T4528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 56.281283][ T4528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.289025][ T4528] vhci_hcd vhci_hcd.0: Device attached [ 56.311553][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.320863][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.378997][ T4531] vhci_hcd: connection closed [ 56.379647][ T3973] vhci_hcd: stop threads [ 56.388667][ T3973] vhci_hcd: release socket [ 56.393083][ T3973] vhci_hcd: disconnect device [ 56.567475][ T4423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.576239][ T4423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.586287][ T4423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.596018][ T4423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.646343][ T4423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.662360][ T4423] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.672390][ T3956] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.679510][ T3956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.691271][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.698371][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.734002][ T4576] block device autoloading is deprecated and will be removed. [ 56.747534][ T4576] loop4: detected capacity change from 0 to 164 [ 56.771540][ T4576] Unable to read rock-ridge attributes [ 56.845541][ T4423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.979651][ T4423] veth0_vlan: entered promiscuous mode [ 57.001988][ T4612] bridge0: port 3(vlan2) entered blocking state [ 57.008334][ T4612] bridge0: port 3(vlan2) entered disabled state [ 57.030555][ T4612] vlan2: entered allmulticast mode [ 57.039963][ T4612] vlan2: left allmulticast mode [ 57.061858][ T4617] dvmrp0: entered allmulticast mode [ 57.080271][ T4423] veth1_vlan: entered promiscuous mode [ 57.129237][ T4423] veth0_macvtap: entered promiscuous mode [ 57.151356][ T4423] veth1_macvtap: entered promiscuous mode [ 57.161202][ T4628] loop4: detected capacity change from 0 to 512 [ 57.184085][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.194722][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.204617][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.215108][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.230943][ T4628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.242706][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.251476][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.261958][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.271799][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.282328][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.292241][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.302806][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.312726][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.323359][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.333284][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.343861][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.355557][ T4628] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.356180][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.363567][ T4628] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 57.390952][ T4628] System zones: 0-1, 15-15, 18-18, 34-34 [ 57.397253][ T4628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.414168][ T4628] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.429014][ T4628] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 57.437144][ T4423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.445911][ T4423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.454675][ T4423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.463478][ T4423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.467407][ T4628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.212: bg 0: block 40: padding at end of block bitmap is not set [ 57.524001][ T4628] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.543897][ T4628] EXT4-fs (loop4): 1 truncate cleaned up [ 57.582641][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.726037][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.067901][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 58.214835][ T4691] random: crng reseeded on system resumption [ 58.343955][ T4694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.352835][ T4694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.487157][ T3967] bond0: (slave bond_slave_0): interface is now down [ 58.493973][ T3967] bond0: (slave bond_slave_1): interface is now down [ 58.501372][ T3967] bond0: now running without any active interface! [ 58.563592][ T4694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.575536][ T4694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.884796][ T4707] loop4: detected capacity change from 0 to 512 [ 58.925352][ T4707] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.974621][ T4707] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.987336][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 59.001361][ T4707] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.223: Failed to acquire dquot type 1 [ 59.016542][ T4707] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.223: bg 0: block 40: padding at end of block bitmap is not set [ 59.058300][ T4707] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.067508][ T4707] EXT4-fs (loop4): 1 truncate cleaned up [ 59.073650][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.199967][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.208374][ T4718] batadv_slave_0: entered promiscuous mode [ 59.686270][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.712147][ T4725] loop2: detected capacity change from 0 to 256 [ 59.736114][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.743985][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.751706][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.857048][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 59.857063][ T29] audit: type=1326 audit(1729770082.861:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 59.889641][ T29] audit: type=1326 audit(1729770082.861:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 60.675707][ T29] audit: type=1400 audit(1729770083.671:1741): avc: denied { create } for pid=4744 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.722975][ T29] audit: type=1400 audit(1729770083.721:1742): avc: denied { bind } for pid=4744 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.748959][ T4745] loop2: detected capacity change from 0 to 1024 [ 60.761182][ T4745] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 60.772068][ T4745] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 60.803509][ T4745] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 60.813736][ T4745] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 60.878865][ T29] audit: type=1400 audit(1729770083.881:1743): avc: denied { create } for pid=4749 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 60.912028][ T4750] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.913826][ T29] audit: type=1400 audit(1729770083.911:1744): avc: denied { connect } for pid=4753 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.931456][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 61.124750][ T4759] loop4: detected capacity change from 0 to 512 [ 61.132053][ T4759] EXT4-fs: user quota file already specified [ 61.139401][ T29] audit: type=1326 audit(1729770084.141:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 61.201160][ T29] audit: type=1326 audit(1729770084.161:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 61.224578][ T29] audit: type=1326 audit(1729770084.161:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 61.247999][ T29] audit: type=1326 audit(1729770084.161:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 61.306350][ T4764] loop2: detected capacity change from 0 to 512 [ 61.316136][ T4764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.381992][ T4764] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 61.399757][ T4764] EXT4-fs (loop2): 1 truncate cleaned up [ 61.406223][ T4764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.431813][ T4764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=4764 comm=syz.2.239 [ 61.450709][ T4764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.239'. [ 61.480869][ T4764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.239'. [ 61.514167][ T4764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.239'. [ 61.586702][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.612168][ T4784] random: crng reseeded on system resumption [ 61.691603][ T4788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.770413][ T4788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.834235][ T4788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.850669][ T4809] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 61.920252][ T4788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.003181][ T4788] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.026429][ T4788] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.076917][ T4788] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.079135][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.088218][ T4788] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.102516][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.506428][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.516454][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.904298][ T4849] loop2: detected capacity change from 0 to 512 [ 62.912240][ T4847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=4847 comm=syz.1.253 [ 62.950484][ T4849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.968691][ T4847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.253'. [ 62.971644][ T4849] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.003939][ T4847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.253'. [ 63.034116][ T4847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.253'. [ 63.049615][ T4849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.069009][ T4849] bond0 (unregistering): Released all slaves [ 63.131109][ T4859] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 63.164448][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.636709][ T3956] bond0: (slave bond_slave_0): interface is now down [ 63.643648][ T3956] bond0: (slave bond_slave_1): interface is now down [ 63.667020][ T11] bond0: (slave bond_slave_0): interface is now down [ 63.673809][ T11] bond0: (slave bond_slave_1): interface is now down [ 63.682884][ T11] bond0: now running without any active interface! [ 63.768006][ T4877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 63.780582][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 63.789559][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.798316][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.805777][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.950127][ T4880] syz.1.263[4880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.950406][ T4880] syz.1.263[4880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.963626][ T4880] syz.1.263[4880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.239622][ T4886] loop2: detected capacity change from 0 to 512 [ 64.269696][ T4886] EXT4-fs: user quota file already specified [ 64.443551][ T4887] chnl_net:caif_netlink_parms(): no params data found [ 64.504201][ T3988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.607894][ T4913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.277'. [ 64.607905][ T4907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.616861][ T4913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.277'. [ 64.616958][ T4913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.277'. [ 64.627672][ T4913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.277'. [ 64.679772][ T4907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.719718][ T4907] bond0 (unregistering): Released all slaves [ 64.760478][ T3988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.785098][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.792273][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.810674][ T4887] bridge_slave_0: entered allmulticast mode [ 64.821982][ T4887] bridge_slave_0: entered promiscuous mode [ 64.833440][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.840825][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.851889][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=4916 comm=syz.0.268 [ 64.865603][ T4887] bridge_slave_1: entered allmulticast mode [ 64.872416][ T4887] bridge_slave_1: entered promiscuous mode [ 64.888094][ T3988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.909488][ T4887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.919958][ T4916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.268'. [ 64.921145][ T4887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.951408][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 64.951424][ T29] audit: type=1326 audit(1729770087.951:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 64.981353][ T29] audit: type=1326 audit(1729770087.961:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 65.004689][ T29] audit: type=1326 audit(1729770087.981:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 65.028021][ T29] audit: type=1326 audit(1729770087.981:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 65.051377][ T29] audit: type=1326 audit(1729770087.981:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dcadff9 code=0x7ffc0000 [ 65.053906][ T4916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.268'. [ 65.078290][ T4887] team0: Port device team_slave_0 added [ 65.093741][ T3988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.106405][ T4887] team0: Port device team_slave_1 added [ 65.128195][ T4916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.268'. [ 65.141543][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.148627][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.174648][ T4887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.189245][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.196239][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.221769][ T4923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 65.222196][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.228648][ T4923] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.228745][ T4923] vhci_hcd vhci_hcd.0: Device attached [ 65.275824][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.285693][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.300315][ T4887] hsr_slave_0: entered promiscuous mode [ 65.307190][ T4887] hsr_slave_1: entered promiscuous mode [ 65.313643][ T4887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.322201][ T4887] Cannot create hsr debugfs directory [ 65.362210][ T29] audit: type=1326 audit(1729770088.361:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 65.385688][ T29] audit: type=1326 audit(1729770088.361:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 65.406804][ T986] vhci_hcd: vhci_device speed not set [ 65.409098][ T29] audit: type=1326 audit(1729770088.361:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 65.437677][ T29] audit: type=1326 audit(1729770088.361:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 65.461335][ T29] audit: type=1326 audit(1729770088.361:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7760dff9 code=0x7ffc0000 [ 65.466833][ T986] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 65.524778][ T4924] vhci_hcd: connection reset by peer [ 65.533839][ T3956] vhci_hcd: stop threads [ 65.538226][ T3956] vhci_hcd: release socket [ 65.542666][ T3956] vhci_hcd: disconnect device [ 65.601762][ T3988] bridge_slave_1: left allmulticast mode [ 65.607510][ T3988] bridge_slave_1: left promiscuous mode [ 65.613171][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.632048][ T3988] bridge_slave_0: left allmulticast mode [ 65.637898][ T3988] bridge_slave_0: left promiscuous mode [ 65.643652][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.675367][ T4943] loop2: detected capacity change from 0 to 512 [ 65.800289][ T4943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.822955][ T4943] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.844697][ T4943] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #12: comm syz.2.274: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.901962][ T4956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.955616][ T4943] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #12: comm syz.2.274: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.090488][ T3988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.103160][ T3988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.139278][ T3988] bond0 (unregistering): Released all slaves [ 66.286620][ T3988] hsr_slave_0: left promiscuous mode [ 66.294637][ T3988] hsr_slave_1: left promiscuous mode [ 66.300624][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.310417][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.318052][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.328141][ T3988] veth1_macvtap: left promiscuous mode [ 66.333718][ T3988] veth0_macvtap: left promiscuous mode [ 66.339305][ T3988] veth1_vlan: left promiscuous mode [ 66.344621][ T3988] veth0_vlan: left promiscuous mode [ 66.371900][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.786797][ T3988] team0 (unregistering): Port device team_slave_1 removed [ 66.882902][ T3988] team0 (unregistering): Port device team_slave_0 removed [ 67.060930][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.077786][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.298360][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.313600][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.329261][ T4997] loop2: detected capacity change from 0 to 1024 [ 67.338865][ T4997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.353099][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.483615][ T4887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.506601][ T4887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.530948][ T4887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.549503][ T4887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.649335][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.682128][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.694038][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.701177][ T3973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.718468][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.725570][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.744733][ T4887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.842702][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.980525][ T4887] veth0_vlan: entered promiscuous mode [ 68.000860][ T4887] veth1_vlan: entered promiscuous mode [ 68.051228][ T4887] veth0_macvtap: entered promiscuous mode [ 68.060862][ T4887] veth1_macvtap: entered promiscuous mode [ 68.075988][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.086522][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.096596][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.107113][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.120642][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.133252][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.143858][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.153902][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.164474][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.174462][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.185030][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.196796][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.208290][ T4887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.217097][ T4887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.225855][ T4887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.234683][ T4887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.561269][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.020586][ T5076] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.210331][ T5083] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.325783][ T5087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.370330][ T5087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.421133][ T5087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.471882][ T5087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.523590][ T5087] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535858][ T5087] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.546971][ T5087] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.559608][ T5087] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.213581][ T5100] loop3: detected capacity change from 0 to 512 [ 70.220601][ T5100] EXT4-fs: user quota file already specified [ 70.294381][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 70.294396][ T29] audit: type=1400 audit(1729770093.291:1935): avc: denied { write } for pid=5101 comm="syz.2.296" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.314595][ T5105] syz.3.297[5105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.338927][ T5103] loop2: detected capacity change from 0 to 2048 [ 70.340201][ T5105] syz.3.297[5105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.359662][ T5105] syz.3.297[5105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.375283][ T29] audit: type=1400 audit(1729770093.381:1936): avc: denied { mounton } for pid=5104 comm="syz.3.297" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.425681][ T5106] syz.1.293[5106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.425892][ T5106] syz.1.293[5106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.437389][ T5106] syz.1.293[5106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.824784][ T5113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.882213][ T986] usb 1-1: enqueue for inactive port 0 [ 70.887816][ T986] usb 1-1: enqueue for inactive port 0 [ 70.949897][ T5115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.958403][ T986] vhci_hcd: vhci_device speed not set [ 70.964133][ T5115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.141770][ T5120] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.209804][ T29] audit: type=1326 audit(1729770094.211:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.233400][ T29] audit: type=1326 audit(1729770094.211:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.256815][ T29] audit: type=1326 audit(1729770094.211:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.280218][ T29] audit: type=1326 audit(1729770094.211:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.303654][ T29] audit: type=1326 audit(1729770094.211:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.327344][ T29] audit: type=1326 audit(1729770094.211:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.350912][ T29] audit: type=1326 audit(1729770094.211:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.374329][ T29] audit: type=1326 audit(1729770094.211:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a6f4dff9 code=0x7ffc0000 [ 71.535951][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 71.545528][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 73.764169][ T5162] netlink: 9 bytes leftover after parsing attributes in process `syz.3.308'. [ 73.773170][ T5162] 0·: renamed from hsr_slave_1 (while UP) [ 73.780314][ T5162] 0·: entered allmulticast mode [ 73.785804][ T5162] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 73.804008][ T5162] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 73.811935][ T5162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'. [ 73.820864][ T5162] hsr0: entered promiscuous mode [ 73.825834][ T5162] hsr0: entered allmulticast mode [ 73.830932][ T5162] hsr_slave_0: entered allmulticast mode [ 73.837346][ T5162] bridge0: port 3(hsr0) entered blocking state [ 73.843662][ T5162] bridge0: port 3(hsr0) entered disabled state [ 73.850987][ T5162] bridge0: port 3(hsr0) entered blocking state [ 73.857217][ T5162] bridge0: port 3(hsr0) entered forwarding state [ 73.898757][ T5168] netlink: 52 bytes leftover after parsing attributes in process `syz.3.309'. [ 73.947807][ T5170] netlink: 'syz.3.310': attribute type 6 has an invalid length. [ 74.064625][ T5173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.102527][ T5175] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.183070][ T5177] loop3: detected capacity change from 0 to 512 [ 74.190178][ T5177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.201377][ T5177] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 74.216117][ T5177] EXT4-fs (loop3): 1 truncate cleaned up [ 74.222145][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.239586][ T5177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=5177 comm=syz.3.313 [ 74.260799][ T5177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.313'. [ 74.281399][ T5177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.313'. [ 74.309514][ T5177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.313'. [ 74.380752][ T4887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.432556][ T5187] loop3: detected capacity change from 0 to 512 [ 74.445670][ T5187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.460653][ T5187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 74.468751][ T5187] System zones: 1-12 [ 74.472880][ T5187] EXT4-fs (loop3): 1 truncate cleaned up [ 74.480161][ T5187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.505050][ T4887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.626127][ T5192] loop3: detected capacity change from 0 to 1024 [ 74.645433][ T5192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.663909][ T5192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.845172][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 74.854111][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 75.042479][ T5200] ================================================================== [ 75.050635][ T5200] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 75.058398][ T5200] [ 75.060732][ T5200] write to 0xffff888106cc8724 of 4 bytes by task 5203 on cpu 1: [ 75.068368][ T5200] xas_set_mark+0x131/0x150 [ 75.072900][ T5200] tag_pages_for_writeback+0xa5/0x2a0 [ 75.078308][ T5200] ext4_do_writepages+0x694/0x2130 [ 75.083445][ T5200] ext4_writepages+0x159/0x2e0 [ 75.088246][ T5200] do_writepages+0x1d8/0x480 [ 75.092865][ T5200] filemap_fdatawrite_wbc+0xdb/0x100 [ 75.098190][ T5200] file_write_and_wait_range+0xc4/0x250 [ 75.103769][ T5200] generic_buffers_fsync_noflush+0x46/0x120 [ 75.109702][ T5200] ext4_sync_file+0x1ff/0x6c0 [ 75.114419][ T5200] vfs_fsync_range+0x116/0x130 [ 75.119209][ T5200] ext4_buffered_write_iter+0x326/0x370 [ 75.124789][ T5200] ext4_file_write_iter+0x293/0xe10 [ 75.130035][ T5200] iter_file_splice_write+0x5f1/0x980 [ 75.135433][ T5200] direct_splice_actor+0x160/0x2c0 [ 75.140576][ T5200] splice_direct_to_actor+0x302/0x670 [ 75.145981][ T5200] do_splice_direct+0xd7/0x150 [ 75.150768][ T5200] do_sendfile+0x39b/0x970 [ 75.155220][ T5200] __x64_sys_sendfile64+0x110/0x150 [ 75.160452][ T5200] x64_sys_call+0xed5/0x2d60 [ 75.165071][ T5200] do_syscall_64+0xc9/0x1c0 [ 75.169603][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.175554][ T5200] [ 75.177896][ T5200] read to 0xffff888106cc8724 of 4 bytes by task 5200 on cpu 0: [ 75.185457][ T5200] filemap_fdatawrite_wbc+0x5c/0x100 [ 75.190779][ T5200] file_write_and_wait_range+0xc4/0x250 [ 75.196356][ T5200] generic_buffers_fsync_noflush+0x46/0x120 [ 75.202277][ T5200] ext4_sync_file+0x1ff/0x6c0 [ 75.206987][ T5200] vfs_fsync_range+0x116/0x130 [ 75.211780][ T5200] ext4_buffered_write_iter+0x326/0x370 [ 75.217348][ T5200] ext4_file_write_iter+0x293/0xe10 [ 75.222586][ T5200] iter_file_splice_write+0x5f1/0x980 [ 75.227986][ T5200] direct_splice_actor+0x160/0x2c0 [ 75.233120][ T5200] splice_direct_to_actor+0x302/0x670 [ 75.238528][ T5200] do_splice_direct+0xd7/0x150 [ 75.243313][ T5200] do_sendfile+0x39b/0x970 [ 75.247750][ T5200] __x64_sys_sendfile64+0x110/0x150 [ 75.252976][ T5200] x64_sys_call+0xed5/0x2d60 [ 75.257612][ T5200] do_syscall_64+0xc9/0x1c0 [ 75.262142][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.268064][ T5200] [ 75.270393][ T5200] value changed: 0x02000021 -> 0x04000021 [ 75.276123][ T5200] [ 75.278459][ T5200] Reported by Kernel Concurrency Sanitizer on: [ 75.284627][ T5200] CPU: 0 UID: 0 PID: 5200 Comm: syz.3.317 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 75.295228][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.305295][ T5200] ================================================================== [ 75.318080][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 75.318092][ T29] audit: type=1400 audit(1729770098.321:1993): avc: denied { write } for pid=2950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.345702][ T29] audit: type=1400 audit(1729770098.321:1994): avc: denied { remove_name } for pid=2950 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.368334][ T29] audit: type=1400 audit(1729770098.321:1995): avc: denied { rename } for pid=2950 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.390705][ T29] audit: type=1400 audit(1729770098.321:1996): avc: denied { add_name } for pid=2950 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.413267][ T29] audit: type=1400 audit(1729770098.321:1997): avc: denied { unlink } for pid=2950 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.435880][ T29] audit: type=1400 audit(1729770098.321:1998): avc: denied { create } for pid=2950 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.713012][ T4887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.