last executing test programs: 8.418431686s ago: executing program 2 (id=73): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) r3 = socket(0x0, 0x80000, 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0x4, {{0x3b, 0x4, 0x2, 0x31, 0xec, 0x65, 0x0, 0xb6, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x1, [0x6, 0x21e]}, @end, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x4, [{@broadcast, 0x5}, {@rand_addr=0x64010100, 0x2}, {@remote, 0x3}, {@rand_addr=0x64010100}, {@multicast1, 0x8}, {@remote, 0x2c1}]}, @generic={0x45, 0xb, "c5e284244b236841ae"}, @timestamp_prespec={0x44, 0x3c, 0xe, 0x3, 0x5, [{@multicast1, 0x100}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@private=0xa010102, 0x8000}, {@local, 0x80000000}, {@empty, 0xff}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcbd3}, {@local, 0x404}]}, @timestamp={0x44, 0x1c, 0x81, 0x0, 0x7, [0x7, 0x80000000, 0xe, 0x2, 0x80, 0x4]}, @lsrr={0x83, 0x1b, 0x14, [@empty, @multicast1, @remote, @loopback, @private=0xa010100, @local]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xecc, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe6c, 0x2, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xfffffffffffffd5e}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xecc}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000120000042cbd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="2218000000400000340012800b000100697036677265000024000280060011004e20000005000b0008000000050008001c00000005000800c6000000140035006272696467655f736c6176655f31000008000500", @ANYRES32=r5, @ANYBLOB="140014006ea1001eedce4927586574"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40015) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)={0x14, 0x12, 0x401, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f0000000080)) 7.840332265s ago: executing program 2 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 7.583726786s ago: executing program 2 (id=77): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x2}, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0x36000000}], 0x1, 0x0) 7.411978461s ago: executing program 2 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x14) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) mkdir(&(0x7f0000000280)='./file0\x00', 0xa0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x408, 0xe8, 0x1f0, 0x1f0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="bd22fdd68c29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "0d6581a280a9fd38cc0cd92b7c41598c1625a223e855c9fbc1389f5d44ef17d4f24b7890dbf5909d70031d8427048dc1646921eaa7e6ac8400"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 6.921362473s ago: executing program 2 (id=84): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x39, &(0x7f0000000240)=[{0xa, 0xb0, 0x4, 0x25}, {0xd2, 0x36, 0xf3, 0xffffff81}, {0x2, 0x7, 0x43, 0x6}, {0x41, 0x5, 0x6, 0x7fffffff}, {0xde55, 0x9, 0x7, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x2, 0x0, &(0x7f00000003c0)="ffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x38cb049, 0x0, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 6.871236007s ago: executing program 2 (id=86): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000090e7ae397c60c512b59c93bd9a141a327c571e01aa000000000000000000000000000000ccf942bb2e38e342d58e8ada39c8d769b04925de2dc68fea58d0cd3e3619c6dcd1de5cc825a330f605b35dfecad2ebf0d0ee3dab2ba696425b6b4df4786f92e0540c73ea496d909d8c3b60073e597badc746907fccbb0da8dba0cb1e693ad08669f6458914e4b33d6f4be36af34f8b731d65dd81c833aab8cad91fe57438a39f69c57d7f29fa6cdc7d2dd0"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_read_part_table(0x5a6, &(0x7f0000001600)="$eJzs0j9I3HcUAPD3O3o9O5STInSsg3SSFq6DHTyoyHncoiJWOnQuOOggdBAqJ6ez1b0o/ikUoYj7jcEEDMJlEocQxCWLkOBy0y+ovwg6hRhNIp/Pcu/33vve48v7Bp+1XJymaZpERFp41zMdV9Gv25WhWvfowNh4RBJJEtExsfr0vJJkHW//dTf7Hsm+a4VSa31/8PV2Z5o8q/ds5rJ6MxcxHxFTx1vFD3JBHrSd8l5xYXGmujRbnjyszp389McvEVGZXunb6K9PfNv/W/awmrn7md/T+vnfg6+yYit/1deb3M18Pq6b+1/rahw12sPf//fnj73fHD2qL2d7P7N/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgju2U94oLizPVpdny5GF8cZH78u/K9ErfRn99Irnqa+aun3vxPL1w+/l/nb4snUflycPq3ElP65//D9KRV6tf/5B/3GqXnmR9vcmNg2nxtqP5BOyUT767jC73v9bVOGq0hyNbd305C86u779964cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxYlaFa9+jA2HhEEr9HxGCuc+s8nxYu60nWt5v9jmT5WqHUWt8fzGfpzdEs38xFzEfE1PFW/l4vwnt5EwAA//8kc33W") 5.550835589s ago: executing program 4 (id=99): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.003953235s ago: executing program 4 (id=104): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) 4.089259113s ago: executing program 4 (id=109): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 3.060415891s ago: executing program 4 (id=116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000240)="82", 0x1}], 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timer_create(0x2, 0x0, &(0x7f00009b1ffc)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 1.470262755s ago: executing program 0 (id=132): socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/13, 0xd}], 0x1) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) io_setup(0xfffffffd, 0x0) io_submit(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.324552548s ago: executing program 0 (id=134): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 1.29695296s ago: executing program 0 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 995.459156ms ago: executing program 0 (id=137): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x9}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "623eebe039a1f617fd02722e3486ebd9"}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x17, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) 902.723643ms ago: executing program 4 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0xfffb, 0x0, 0xff, 0x1ff, 0xffffffad}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x1693, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x3, 0x2dc}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4282, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) 898.249354ms ago: executing program 0 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000240)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 853.811128ms ago: executing program 3 (id=141): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x25, 0x2, @thr={0x0, 0x0}}, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001b40)={0x5, {{0x2, 0x4e23, @remote}}}, 0x90) timer_gettime(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x40}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 852.825348ms ago: executing program 3 (id=142): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5c12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r0, 0x0, 0x7a680000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0800000000000000b702000014000000b70300000000009c3c51a9dc3e372d73d7008500000083000000bf0900000000000055090100000000009500080000000000bf91000000000000b7020000000000008500000085000000b70000005e00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x9, 0x0) write(r3, &(0x7f0000001100)="94", 0x1) tee(r2, r6, 0x81, 0x0) write$binfmt_elf64(r6, 0x0, 0x78) write$binfmt_misc(r4, 0x0, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_load(r7, &(0x7f00000006c0)={0xf97cff8c, 0x8, 'SE Linux', "cfe9bb9bb5f48441517a3074c5527d8a"}, 0x20) 419.381385ms ago: executing program 1 (id=143): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x9) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 396.880176ms ago: executing program 3 (id=144): r0 = gettid() r1 = perf_event_open(&(0x7f00000009c0)={0x4, 0x80, 0xe8, 0x4, 0x4, 0x0, 0x0, 0x7fffffff, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x5}, 0x4, 0x8, 0xba79, 0x5, 0x7, 0xe97, 0xffff, 0x0, 0x0, 0x0, 0x7d}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x5, 0x3b, 0x6, 0x6, 0x0, 0x100, 0x0, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000880), 0xe}, 0x100090, 0x101, 0x13, 0x2, 0x3, 0xa56, 0x7, 0x0, 0x400, 0x0, 0x3}, r0, 0x5, r1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a00000000020000000000001800098008"], 0x34}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4000001, &(0x7f0000000900)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@empty, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) r6 = syz_open_procfs(r5, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@setneightbl={0x6c, 0x43, 0x8, 0x70bd2c, 0x25dfdbfb, {0x3343c9a7c0e16960}, [@NDTA_THRESH3={0x8, 0x4, 0x1}, @NDTA_THRESH3={0x8, 0x4, 0x9}, @NDTA_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x120000}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x5}, @NDTA_NAME={0x6, 0x1, '/\x00'}, @NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x9}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) io_setup(0x7fff, &(0x7f00000000c0)=0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) ftruncate(r8, 0x84) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, r6, 0x0, 0x4}]) 367.522859ms ago: executing program 1 (id=145): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x401) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 337.155041ms ago: executing program 1 (id=146): socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 323.312153ms ago: executing program 1 (id=147): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 258.386889ms ago: executing program 1 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}) setuid(0x0) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@orlov}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x15, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000bd89952e5400000000000000000f4ffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) 251.695909ms ago: executing program 3 (id=150): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x4}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0bc5310, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 215.234482ms ago: executing program 1 (id=151): lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20018884, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0) 214.455972ms ago: executing program 3 (id=152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket(0x29, 0x2, 0x7ff) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 214.098062ms ago: executing program 3 (id=153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x10) pipe2(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x124, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffccd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x124}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r6, 0x9}}, 0x10) 68.792625ms ago: executing program 4 (id=154): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = syz_open_procfs(0x0, 0x0) read$char_usb(r2, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=155): socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f000012d000/0x2000)=nil, 0x2000, 0x4, 0x1, 0x80000) open(0x0, 0x143c62, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x1, 0x5, 0xdd) iopl(0x3) kernel console output (not intermixed with test programs): [ 19.093018][ T29] audit: type=1400 audit(1728578437.538:81): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. [ 22.410778][ T29] audit: type=1400 audit(1728578440.858:82): avc: denied { mounton } for pid=3255 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.411682][ T3255] cgroup: Unknown subsys name 'net' [ 22.433476][ T29] audit: type=1400 audit(1728578440.858:83): avc: denied { mount } for pid=3255 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.460810][ T29] audit: type=1400 audit(1728578440.888:84): avc: denied { unmount } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.634968][ T3255] cgroup: Unknown subsys name 'cpuset' [ 22.640933][ T3255] cgroup: Unknown subsys name 'rlimit' [ 22.768262][ T29] audit: type=1400 audit(1728578441.218:85): avc: denied { setattr } for pid=3255 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.791652][ T29] audit: type=1400 audit(1728578441.218:86): avc: denied { create } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.798696][ T3257] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.812130][ T29] audit: type=1400 audit(1728578441.218:87): avc: denied { write } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.841055][ T29] audit: type=1400 audit(1728578441.218:88): avc: denied { read } for pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.861406][ T29] audit: type=1400 audit(1728578441.218:89): avc: denied { mounton } for pid=3255 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.886223][ T29] audit: type=1400 audit(1728578441.218:90): avc: denied { mount } for pid=3255 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.909512][ T29] audit: type=1400 audit(1728578441.268:91): avc: denied { relabelto } for pid=3257 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.937036][ T3255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.977105][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 24.009587][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 24.037624][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 24.104746][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.111793][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.118975][ T3264] bridge_slave_0: entered allmulticast mode [ 24.125265][ T3264] bridge_slave_0: entered promiscuous mode [ 24.146379][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.153478][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.160680][ T3264] bridge_slave_1: entered allmulticast mode [ 24.167302][ T3264] bridge_slave_1: entered promiscuous mode [ 24.173340][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.180445][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.187559][ T3265] bridge_slave_0: entered allmulticast mode [ 24.194026][ T3265] bridge_slave_0: entered promiscuous mode [ 24.207626][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.214784][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.221889][ T3266] bridge_slave_0: entered allmulticast mode [ 24.228200][ T3266] bridge_slave_0: entered promiscuous mode [ 24.239045][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.246126][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.253272][ T3265] bridge_slave_1: entered allmulticast mode [ 24.259802][ T3265] bridge_slave_1: entered promiscuous mode [ 24.272243][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.279324][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.286406][ T3266] bridge_slave_1: entered allmulticast mode [ 24.292643][ T3266] bridge_slave_1: entered promiscuous mode [ 24.306072][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.320851][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.342408][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 24.351756][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.361630][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.375641][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.396911][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.417772][ T3265] team0: Port device team_slave_0 added [ 24.439088][ T3264] team0: Port device team_slave_0 added [ 24.445215][ T3265] team0: Port device team_slave_1 added [ 24.465123][ T3266] team0: Port device team_slave_0 added [ 24.479467][ T3264] team0: Port device team_slave_1 added [ 24.495673][ T3266] team0: Port device team_slave_1 added [ 24.505183][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.512121][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.538222][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.548967][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 24.565650][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.572695][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.579813][ T3273] bridge_slave_0: entered allmulticast mode [ 24.586077][ T3273] bridge_slave_0: entered promiscuous mode [ 24.592600][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.599565][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.625498][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.645081][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.652026][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.677922][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.693189][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.700314][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.707436][ T3273] bridge_slave_1: entered allmulticast mode [ 24.713840][ T3273] bridge_slave_1: entered promiscuous mode [ 24.729566][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.736528][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.762469][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.773316][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.780252][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.806147][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.831069][ T3265] hsr_slave_0: entered promiscuous mode [ 24.837199][ T3265] hsr_slave_1: entered promiscuous mode [ 24.843265][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.850223][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.876187][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.902312][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.926131][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.941439][ T3264] hsr_slave_0: entered promiscuous mode [ 24.947508][ T3264] hsr_slave_1: entered promiscuous mode [ 24.953364][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.960937][ T3264] Cannot create hsr debugfs directory [ 24.979256][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.986306][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.993384][ T3267] bridge_slave_0: entered allmulticast mode [ 24.999812][ T3267] bridge_slave_0: entered promiscuous mode [ 25.019653][ T3273] team0: Port device team_slave_0 added [ 25.025410][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.032441][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.039640][ T3267] bridge_slave_1: entered allmulticast mode [ 25.045977][ T3267] bridge_slave_1: entered promiscuous mode [ 25.059200][ T3266] hsr_slave_0: entered promiscuous mode [ 25.065153][ T3266] hsr_slave_1: entered promiscuous mode [ 25.070866][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.078436][ T3266] Cannot create hsr debugfs directory [ 25.086446][ T3273] team0: Port device team_slave_1 added [ 25.120951][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.128026][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.153965][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.167858][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.185668][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.192599][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.218651][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.232726][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.278557][ T3267] team0: Port device team_slave_0 added [ 25.303790][ T3267] team0: Port device team_slave_1 added [ 25.317095][ T3273] hsr_slave_0: entered promiscuous mode [ 25.322972][ T3273] hsr_slave_1: entered promiscuous mode [ 25.328934][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.336485][ T3273] Cannot create hsr debugfs directory [ 25.366306][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.373254][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.399201][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.412494][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.419534][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.445414][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.489801][ T3265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.503093][ T3267] hsr_slave_0: entered promiscuous mode [ 25.509339][ T3267] hsr_slave_1: entered promiscuous mode [ 25.515187][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.522723][ T3267] Cannot create hsr debugfs directory [ 25.530050][ T3265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.552139][ T3265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.575554][ T3265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.604949][ T3266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.622461][ T3266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.630610][ T3266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.640834][ T3266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.664886][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.681885][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.700747][ T3273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.709048][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.720167][ T3273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.728762][ T3273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.737362][ T3273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.745953][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.794671][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.809667][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.818079][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.827427][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.835816][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.860947][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.877657][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.884723][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.893392][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.900535][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.920361][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.940413][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.953238][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.963659][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.983244][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.994756][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.003214][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.024780][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.034488][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.041625][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.050143][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.057277][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.076427][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.083497][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.091771][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.098818][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.117763][ T1865] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.124865][ T1865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.134995][ T1865] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.142053][ T1865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.157629][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.188402][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.202444][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.216027][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.236765][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.262579][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.270918][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.277984][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.291047][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.298126][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.322920][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.409607][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.437351][ T3265] veth0_vlan: entered promiscuous mode [ 26.460338][ T3273] veth0_vlan: entered promiscuous mode [ 26.471525][ T3265] veth1_vlan: entered promiscuous mode [ 26.495583][ T3273] veth1_vlan: entered promiscuous mode [ 26.513014][ T3273] veth0_macvtap: entered promiscuous mode [ 26.523227][ T3265] veth0_macvtap: entered promiscuous mode [ 26.532930][ T3273] veth1_macvtap: entered promiscuous mode [ 26.543407][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.556022][ T3265] veth1_macvtap: entered promiscuous mode [ 26.572059][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.600032][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.610668][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.621223][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.634637][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.642553][ T3266] veth0_vlan: entered promiscuous mode [ 26.652393][ T3273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.661216][ T3273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.669973][ T3273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.678689][ T3273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.689031][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.699542][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.710289][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.717999][ T3264] veth0_vlan: entered promiscuous mode [ 26.727992][ T3265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.736823][ T3265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.745676][ T3265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.754450][ T3265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.768072][ T3266] veth1_vlan: entered promiscuous mode [ 26.790984][ T3264] veth1_vlan: entered promiscuous mode [ 26.809670][ T3267] veth0_vlan: entered promiscuous mode [ 26.823039][ T3264] veth0_macvtap: entered promiscuous mode [ 26.834167][ T3266] veth0_macvtap: entered promiscuous mode [ 26.841559][ T3264] veth1_macvtap: entered promiscuous mode [ 26.841833][ T3273] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.855564][ T3267] veth1_vlan: entered promiscuous mode [ 26.869038][ T3266] veth1_macvtap: entered promiscuous mode [ 26.879910][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.890412][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.900324][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.910751][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.922515][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.939955][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.950535][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.960396][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.970846][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.981412][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.992390][ T3407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.010376][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.020925][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.023708][ T3410] loop1: detected capacity change from 0 to 2048 [ 27.030763][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.047591][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.057512][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.068120][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.078936][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.085988][ T3410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.087908][ T3266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.106936][ T3266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.115737][ T3266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.124468][ T3266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.147133][ T3407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.159647][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.170148][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.179953][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.190367][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.200179][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.210683][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.221487][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.231411][ T3267] veth0_macvtap: entered promiscuous mode [ 27.241673][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.250427][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.259122][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.267841][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.278405][ T3267] veth1_macvtap: entered promiscuous mode [ 27.304022][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.314547][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.324403][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.334930][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.344772][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.355290][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.365153][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.375632][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.387677][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.411503][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 27.423872][ T3422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 27.432689][ T3422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 27.441441][ T3422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 27.444562][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 27.444574][ T29] audit: type=1400 audit(1728578445.888:139): avc: denied { read } for pid=3423 comm="syz.2.3" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.450161][ T3422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 27.456276][ T29] audit: type=1400 audit(1728578445.888:140): avc: denied { open } for pid=3423 comm="syz.2.3" path="net:[4026532396]" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.480271][ T3422] vxlan0: entered allmulticast mode [ 27.485719][ T29] audit: type=1400 audit(1728578445.888:141): avc: denied { create } for pid=3423 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 27.565615][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.576091][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.585915][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.596391][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.606262][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.616778][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.626673][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.631215][ T3430] loop4: detected capacity change from 0 to 512 [ 27.637105][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.654778][ T3430] ======================================================= [ 27.654778][ T3430] WARNING: The mand mount option has been deprecated and [ 27.654778][ T3430] and is ignored by this kernel. Remove the mand [ 27.654778][ T3430] option from the mount to silence this warning. [ 27.654778][ T3430] ======================================================= [ 27.661957][ T29] audit: type=1400 audit(1728578445.998:142): avc: denied { write } for pid=3423 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 27.690895][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.708629][ T29] audit: type=1400 audit(1728578445.998:143): avc: denied { ioctl } for pid=3423 comm="syz.2.3" path="socket:[3603]" dev="sockfs" ino=3603 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 27.743776][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.752648][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.761376][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.770202][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.828721][ T3430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.868201][ T3430] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.875472][ T3430] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8: bg 0: block 248: padding at end of block bitmap is not set [ 28.033746][ T3430] Quota error (device loop4): write_blk: dquota write failed [ 28.041221][ T3430] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 28.051154][ T3430] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.8: Failed to acquire dquot type 1 [ 28.064994][ T3430] EXT4-fs (loop4): 1 truncate cleaned up [ 28.072062][ T3430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.087007][ T3430] syz.4.8[3430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.087081][ T3430] syz.4.8[3430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.098483][ T3430] syz.4.8[3430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.126863][ T3430] syz.4.8 (3430) used greatest stack depth: 9584 bytes left [ 28.148788][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.152834][ T29] audit: type=1400 audit(1728578446.598:144): avc: denied { setopt } for pid=3442 comm="syz.2.10" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.179941][ T3440] wireguard0: entered promiscuous mode [ 28.185650][ T3440] wireguard0: entered allmulticast mode [ 28.191133][ T29] audit: type=1400 audit(1728578446.638:145): avc: denied { write } for pid=3444 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.221033][ T3443] dvmrp1: entered allmulticast mode [ 28.244083][ T29] audit: type=1326 audit(1728578446.688:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.2.11" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e7268dff9 code=0x0 [ 28.306755][ T3449] loop2: detected capacity change from 0 to 2048 [ 28.318558][ T3449] EXT4-fs error (device loop2): __ext4_fill_super:5458: inode #2: comm syz.2.11: casefold flag without casefold feature [ 28.328590][ T3445] loop4: detected capacity change from 0 to 128 [ 28.331288][ T3449] EXT4-fs (loop2): get root inode failed [ 28.343039][ T3449] EXT4-fs (loop2): mount failed [ 28.405151][ T3445] syz.4.9: attempt to access beyond end of device [ 28.405151][ T3445] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 28.500178][ T3460] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 28.506772][ T3460] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 28.514412][ T3460] vhci_hcd vhci_hcd.0: Device attached [ 28.556021][ T3461] vhci_hcd: connection closed [ 28.556181][ T50] vhci_hcd: stop threads [ 28.565164][ T50] vhci_hcd: release socket [ 28.569604][ T50] vhci_hcd: disconnect device [ 28.630322][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 28.641078][ T3464] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.649894][ T3464] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.658656][ T3464] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.664474][ T3416] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 28.667404][ T3464] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.690801][ T3464] vxlan0: entered allmulticast mode [ 28.701159][ T3407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.215888][ T3477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.224860][ T3477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.237226][ T3477] vlan2: entered promiscuous mode [ 29.242951][ T3477] team_slave_0: entered promiscuous mode [ 29.248588][ T3477] team_slave_1: entered promiscuous mode [ 29.254220][ T3477] team0: entered promiscuous mode [ 29.261256][ T3477] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 29.649821][ T3480] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 30.038968][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 30.152332][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 30.319855][ T3496] loop3: detected capacity change from 0 to 128 [ 30.436654][ T3493] syz.3.29: attempt to access beyond end of device [ 30.436654][ T3493] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 30.619132][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 30.632240][ T3407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.648741][ T3502] loop0: detected capacity change from 0 to 512 [ 30.677971][ T3502] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 30.685909][ T3407] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.685987][ T3502] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 30.696855][ T3407] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.702821][ T3502] System zones: 0-1, 15-15, 18-18, 34-34 [ 30.714102][ T3407] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.716538][ T3502] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.729181][ T3407] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.730736][ T3502] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 30.753610][ T3502] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 30.761175][ T3502] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.32: bg 0: block 40: padding at end of block bitmap is not set [ 30.761443][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.776746][ T3502] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 30.793530][ T3502] EXT4-fs (loop0): 1 truncate cleaned up [ 30.799771][ T3502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.821034][ T3502] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.32: corrupted xattr block 19: bad e_name length [ 30.834865][ T3502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 30.843828][ T3502] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.32: corrupted xattr block 19: bad e_name length [ 30.857288][ T3502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 30.866585][ T3502] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.32: corrupted xattr block 19: bad e_name length [ 30.896011][ T3502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 30.905790][ T3509] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.940339][ T3514] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 31.003968][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.070008][ T1865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.115515][ T3520] loop0: detected capacity change from 0 to 1024 [ 31.151265][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.166807][ T1865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.182820][ T3520] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 31.199276][ T3520] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 31.211682][ T3520] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.211682][ T3520] [ 31.221454][ T3520] EXT4-fs (loop0): Total free blocks count 0 [ 31.227460][ T3520] EXT4-fs (loop0): Free/Dirty block details [ 31.233368][ T3520] EXT4-fs (loop0): free_blocks=68451041280 [ 31.239293][ T3520] EXT4-fs (loop0): dirty_blocks=32 [ 31.244443][ T3520] EXT4-fs (loop0): Block reservation details [ 31.250482][ T3520] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 31.259493][ T1865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.282522][ T3537] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 31.324517][ T3519] chnl_net:caif_netlink_parms(): no params data found [ 31.383044][ T1865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.463334][ T3520] SELinux: policydb version -1682183729 does not match my version range 15-33 [ 31.480870][ T3520] SELinux: failed to load policy [ 31.505052][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.512127][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.533752][ T3519] bridge_slave_0: entered allmulticast mode [ 31.541895][ T3519] bridge_slave_0: entered promiscuous mode [ 31.562018][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.569177][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.576462][ T3519] bridge_slave_1: entered allmulticast mode [ 31.582965][ T3519] bridge_slave_1: entered promiscuous mode [ 31.626593][ T1865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 31.636982][ T1865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.655028][ T3519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.678937][ T3519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.705699][ T1865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 31.716043][ T1865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.745036][ T3519] team0: Port device team_slave_0 added [ 31.758010][ T3519] team0: Port device team_slave_1 added [ 31.766924][ T3568] loop0: detected capacity change from 0 to 128 [ 31.789973][ T1865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 31.800317][ T1865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.820693][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.827695][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.853671][ T3519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.871640][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.878628][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.898965][ T3547] syz.0.45: attempt to access beyond end of device [ 31.898965][ T3547] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 31.904653][ T3519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.993038][ T1865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 32.003464][ T1865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.029325][ T3576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.058377][ T3573] loop2: detected capacity change from 0 to 2048 [ 32.109981][ T3550] chnl_net:caif_netlink_parms(): no params data found [ 32.122681][ T1865] bridge_slave_1: left allmulticast mode [ 32.128388][ T1865] bridge_slave_1: left promiscuous mode [ 32.134052][ T1865] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.142115][ T1865] bridge_slave_0: left allmulticast mode [ 32.142621][ T3573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.147865][ T1865] bridge_slave_0: left promiscuous mode [ 32.148099][ T1865] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.185371][ T1865] bridge_slave_1: left allmulticast mode [ 32.191158][ T1865] bridge_slave_1: left promiscuous mode [ 32.196845][ T1865] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.228574][ T1865] bridge_slave_0: left allmulticast mode [ 32.234368][ T1865] bridge_slave_0: left promiscuous mode [ 32.239997][ T1865] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.577420][ T1865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.588047][ T1865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.598237][ T1865] bond0 (unregistering): Released all slaves [ 32.607813][ T1865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.618122][ T1865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.628530][ T1865] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 32.636954][ T1865] team0: left promiscuous mode [ 32.641835][ T1865] team_slave_0: left promiscuous mode [ 32.647252][ T1865] team_slave_1: left promiscuous mode [ 32.653805][ T1865] bond0 (unregistering): Released all slaves [ 32.670743][ T3576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.720161][ T3519] hsr_slave_0: entered promiscuous mode [ 32.726160][ T3519] hsr_slave_1: entered promiscuous mode [ 32.732068][ T3519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.740065][ T3519] Cannot create hsr debugfs directory [ 32.747302][ T1865] hsr_slave_0: left promiscuous mode [ 32.752971][ T1865] hsr_slave_1: left promiscuous mode [ 32.758647][ T1865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.766065][ T1865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.773734][ T1865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.781188][ T1865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.790315][ T1865] hsr_slave_0: left promiscuous mode [ 32.795873][ T1865] hsr_slave_1: left promiscuous mode [ 32.801489][ T1865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.808936][ T1865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.816582][ T1865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.823943][ T1865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.833859][ T1865] veth1_macvtap: left promiscuous mode [ 32.839453][ T1865] veth0_macvtap: left promiscuous mode [ 32.845120][ T1865] veth1_vlan: left promiscuous mode [ 32.850434][ T1865] veth0_vlan: left promiscuous mode [ 32.857368][ T1865] veth1_macvtap: left promiscuous mode [ 32.862815][ T1865] veth0_macvtap: left promiscuous mode [ 32.868303][ T1865] veth1_vlan: left promiscuous mode [ 32.873599][ T1865] veth0_vlan: left promiscuous mode [ 32.988812][ T1865] team0 (unregistering): Port device team_slave_1 removed [ 32.998883][ T1865] team0 (unregistering): Port device team_slave_0 removed [ 33.056425][ T1865] team0 (unregistering): Port device team_slave_1 removed [ 33.066524][ T1865] team0 (unregistering): Port device team_slave_0 removed [ 33.112683][ T3576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.152229][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.159431][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.166910][ T3550] bridge_slave_0: entered allmulticast mode [ 33.173356][ T3550] bridge_slave_0: entered promiscuous mode [ 33.180676][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.187789][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.195970][ T3550] bridge_slave_1: entered allmulticast mode [ 33.203804][ T3550] bridge_slave_1: entered promiscuous mode [ 33.216432][ T3576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.242503][ T3550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.255073][ T3550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.274872][ T3550] team0: Port device team_slave_0 added [ 33.281356][ T3550] team0: Port device team_slave_1 added [ 33.300575][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.307670][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.333829][ T3550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.361924][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.368926][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.394918][ T3550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.431638][ T3576] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.443908][ T3576] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.456626][ T3576] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.468113][ T3576] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.490455][ T3550] hsr_slave_0: entered promiscuous mode [ 33.497251][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 33.497264][ T29] audit: type=1400 audit(1728578451.948:252): avc: denied { create } for pid=3617 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.505231][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.532399][ T29] audit: type=1400 audit(1728578451.968:253): avc: denied { setopt } for pid=3617 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.553601][ T3550] hsr_slave_1: entered promiscuous mode [ 33.560116][ T3550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.567888][ T3550] Cannot create hsr debugfs directory [ 33.586120][ T3618] netlink: 76 bytes leftover after parsing attributes in process `syz.1.57'. [ 33.596539][ T29] audit: type=1400 audit(1728578452.048:254): avc: denied { connect } for pid=3617 comm="syz.1.57" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.617283][ T29] audit: type=1400 audit(1728578452.048:255): avc: denied { write } for pid=3617 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.637140][ T29] audit: type=1400 audit(1728578452.048:256): avc: denied { nlmsg_write } for pid=3617 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.657537][ T29] audit: type=1400 audit(1728578452.048:257): avc: denied { execute } for pid=3619 comm="syz.2.49" path="/9/cpuacct.usage_sys" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.680665][ T29] audit: type=1400 audit(1728578452.048:258): avc: denied { create } for pid=3619 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.699980][ T29] audit: type=1400 audit(1728578452.048:259): avc: denied { setopt } for pid=3619 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.748294][ T3625] loop2: detected capacity change from 0 to 512 [ 33.755041][ T3627] loop0: detected capacity change from 0 to 512 [ 33.774019][ C0] hrtimer: interrupt took 41007 ns [ 33.779398][ T3622] veth0_vlan: entered allmulticast mode [ 33.786217][ T3625] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 33.794208][ T3625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 33.802516][ T3622] can0: slcan on ttyS3. [ 33.808346][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.808529][ T3625] System zones: 0-1, 15-15, 18-18, 34-34 [ 33.839182][ T3627] ext4 filesystem being mounted at /14/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.843732][ T3625] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.862256][ T3625] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 33.863496][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 33.871574][ T3625] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 33.871599][ T3625] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 33.893245][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 33.933648][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 33.955069][ T3625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.52: bg 0: block 40: padding at end of block bitmap is not set [ 33.975747][ T29] audit: type=1400 audit(1728578452.428:260): avc: denied { create } for pid=3626 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.978155][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.012018][ T3625] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 34.016409][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 34.024138][ T3625] EXT4-fs (loop2): 1 truncate cleaned up [ 34.044708][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 34.071516][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.095657][ T3627] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 18: comm syz.0.51: lblock 23 mapped to illegal pblock 18 (length 1) [ 34.103195][ T3647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.121087][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 34.127584][ T3625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.153147][ T3627] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 20: comm syz.0.51: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 34.154408][ T3622] can0 (unregistered): slcan off ttyS3. [ 34.203711][ T3625] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.52: corrupted xattr block 19: bad e_name length [ 34.231848][ T3519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.233299][ T3625] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 34.249504][ T3519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.267458][ T3519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.275437][ T3625] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.52: corrupted xattr block 19: bad e_name length [ 34.290429][ T3519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.309219][ T3625] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 34.334425][ T3625] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.52: corrupted xattr block 19: bad e_name length [ 34.388339][ T3519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.399800][ T3519] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.409920][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.417135][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.450159][ T3625] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 34.495759][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.502826][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.519811][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.581653][ T3519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.592071][ T3519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.617747][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 34.628867][ T3669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.637103][ T3669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.645331][ T3669] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.653569][ T3669] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.662461][ T3669] vxlan0: entered allmulticast mode [ 34.692792][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.702492][ T3550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.728274][ T3550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.753281][ T3550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.763366][ T3679] IPVS: set_ctl: invalid protocol: 158 255.255.255.255:0 [ 34.778210][ T3519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.791743][ T3550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.875417][ T3519] veth0_vlan: entered promiscuous mode [ 34.887832][ T3519] veth1_vlan: entered promiscuous mode [ 34.898631][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 34.921607][ T3519] veth0_macvtap: entered promiscuous mode [ 34.929166][ T3519] veth1_macvtap: entered promiscuous mode [ 34.943682][ T3550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.966073][ T3519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.976748][ T3519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.986612][ T3519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.997099][ T3519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.006921][ T3519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.017345][ T3519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.029430][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.045562][ T3519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.056096][ T3519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.065985][ T3519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.076458][ T3519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.086286][ T3519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.096703][ T3519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.107826][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.116563][ T3519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.125301][ T3519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.133995][ T3519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.142774][ T3519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.156498][ T3550] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.171186][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.178287][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.202086][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.209247][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.233195][ T3550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.243725][ T3550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.275187][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 35.286922][ T3720] loop2: detected capacity change from 0 to 512 [ 35.302566][ T3720] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 35.312647][ T3719] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.321488][ T3719] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.330339][ T3719] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.339094][ T3719] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.348684][ T3720] EXT4-fs (loop2): invalid journal inode [ 35.349394][ T3719] vxlan0: entered allmulticast mode [ 35.417058][ T3550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.535857][ T3550] veth0_vlan: entered promiscuous mode [ 35.547413][ T3550] veth1_vlan: entered promiscuous mode [ 35.569168][ T3550] veth0_macvtap: entered promiscuous mode [ 35.583949][ T3550] veth1_macvtap: entered promiscuous mode [ 35.596553][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.607118][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.616945][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.627375][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.637344][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.647861][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.657806][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.668362][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.680180][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.690878][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.701402][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.711350][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.721785][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.731606][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.742021][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.751840][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.762247][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.773008][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.783915][ T3550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.792851][ T3550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.801675][ T3550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.810452][ T3550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.858538][ T3799] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 35.885022][ T3796] loop2: detected capacity change from 0 to 512 [ 35.896097][ T3796] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 35.912378][ T3794] IPVS: stopping master sync thread 3799 ... [ 35.915053][ T3796] EXT4-fs (loop2): mount failed [ 44.728659][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 44.728672][ T29] audit: type=1400 audit(1728578463.178:294): avc: denied { prog_load } for pid=3805 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.753678][ T29] audit: type=1400 audit(1728578463.178:295): avc: denied { bpf } for pid=3805 comm="syz.1.58" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.773951][ T29] audit: type=1400 audit(1728578463.178:296): avc: denied { execmem } for pid=3804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.808704][ T3808] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 44.810392][ T29] audit: type=1400 audit(1728578463.178:297): avc: denied { map_create } for pid=3805 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.838695][ T29] audit: type=1400 audit(1728578463.178:298): avc: denied { map_read map_write } for pid=3805 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.858286][ T29] audit: type=1400 audit(1728578463.178:299): avc: denied { perfmon } for pid=3805 comm="syz.1.58" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.878964][ T29] audit: type=1400 audit(1728578463.188:300): avc: denied { prog_run } for pid=3805 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.897706][ T29] audit: type=1400 audit(1728578463.228:301): avc: denied { read } for pid=3813 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.919051][ T29] audit: type=1400 audit(1728578463.228:302): avc: denied { open } for pid=3813 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.942405][ T29] audit: type=1400 audit(1728578463.228:303): avc: denied { mounton } for pid=3813 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.045113][ T3817] loop2: detected capacity change from 0 to 2048 [ 45.087544][ T3813] chnl_net:caif_netlink_parms(): no params data found [ 45.245683][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.256002][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.441848][ T3813] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.449038][ T3813] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.472131][ T3813] bridge_slave_0: entered allmulticast mode [ 45.478593][ T3813] bridge_slave_0: entered promiscuous mode [ 45.490293][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.500612][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.519863][ T3813] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.527018][ T3813] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.542549][ T3813] bridge_slave_1: entered allmulticast mode [ 45.553834][ T3813] bridge_slave_1: entered promiscuous mode [ 45.595706][ T3849] loop2: detected capacity change from 0 to 1024 [ 45.606527][ T3849] EXT4-fs: Ignoring removed orlov option [ 45.612321][ T3849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.658265][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.668655][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.684783][ T3849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.700546][ T3813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.000504][ T3853] wireguard0: entered promiscuous mode [ 46.006090][ T3853] wireguard0: entered allmulticast mode [ 46.085618][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.096035][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.110794][ T3813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.127259][ T3849] EXT4-fs (loop2): shut down requested (0) [ 46.152944][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.163448][ T3813] team0: Port device team_slave_0 added [ 46.197110][ T3813] team0: Port device team_slave_1 added [ 46.207577][ T3863] SELinux: Context is not valid (left unmapped). [ 46.225910][ T3863] netlink: 'syz.2.75': attribute type 9 has an invalid length. [ 46.236662][ T3863] bond0: entered promiscuous mode [ 46.241694][ T3863] bond_slave_0: entered promiscuous mode [ 46.247530][ T3863] bond_slave_1: entered promiscuous mode [ 46.254938][ T3863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.262728][ T3863] bond0: left promiscuous mode [ 46.267588][ T3863] bond_slave_0: left promiscuous mode [ 46.273012][ T3863] bond_slave_1: left promiscuous mode [ 46.284048][ T3813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.291041][ T3813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.316958][ T3813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.328462][ T3864] netlink: 'syz.2.75': attribute type 12 has an invalid length. [ 46.340814][ T3813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.347936][ T3813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.373897][ T3813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.421501][ T3868] loop2: detected capacity change from 0 to 1024 [ 46.428313][ T3868] EXT4-fs: Ignoring removed oldalloc option [ 46.459323][ T3868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.491238][ T3813] hsr_slave_0: entered promiscuous mode [ 46.499342][ T3869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.522428][ T3813] hsr_slave_1: entered promiscuous mode [ 46.528961][ T3813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.546130][ T3813] Cannot create hsr debugfs directory [ 46.566213][ T28] bridge_slave_1: left allmulticast mode [ 46.571883][ T28] bridge_slave_1: left promiscuous mode [ 46.577615][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.594482][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.607928][ T28] bridge_slave_0: left allmulticast mode [ 46.611191][ T3883] loop3: detected capacity change from 0 to 128 [ 46.613584][ T28] bridge_slave_0: left promiscuous mode [ 46.625591][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.642290][ T3883] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.656674][ T3883] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.915057][ T3519] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.010464][ T3891] syz.2.80[3891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.010552][ T3891] syz.2.80[3891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.023122][ T3891] syz.2.80[3891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.034938][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 47.089270][ T3897] loop3: detected capacity change from 0 to 128 [ 47.100456][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.111329][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.127387][ T28] bond0 (unregistering): Released all slaves [ 47.136294][ T3881] Zero length message leads to an empty skb [ 47.159243][ T3897] syz.3.85: attempt to access beyond end of device [ 47.159243][ T3897] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 47.179377][ T28] hsr_slave_0: left promiscuous mode [ 47.186194][ T28] hsr_slave_1: left promiscuous mode [ 47.191888][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.199401][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.207175][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.214813][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.226184][ T28] veth1_macvtap: left promiscuous mode [ 47.231658][ T28] veth0_macvtap: left promiscuous mode [ 47.237210][ T28] veth1_vlan: left promiscuous mode [ 47.242429][ T28] veth0_vlan: left promiscuous mode [ 47.248992][ T11] kworker/u8:0: attempt to access beyond end of device [ 47.248992][ T11] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 47.351832][ T3920] loop2: detected capacity change from 0 to 2048 [ 47.401796][ T28] team0 (unregistering): Port device team_slave_1 removed [ 47.411880][ T28] team0 (unregistering): Port device team_slave_0 removed [ 47.690533][ T3950] netlink: 9 bytes leftover after parsing attributes in process `syz.3.92'. [ 47.700130][ T3950] 0: renamed from hsr_slave_1 (while UP) [ 47.796469][ T3950] 0: entered allmulticast mode [ 47.802013][ T3950] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 48.080024][ T3961] loop3: detected capacity change from 0 to 2048 [ 48.085029][ T3813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.097616][ T3813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.110502][ T3961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.130701][ T3813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.138138][ T3970] Cannot find add_set index 0 as target [ 48.139644][ T3813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.156387][ T3961] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.175574][ T3961] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.187867][ T3961] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.187867][ T3961] [ 48.197577][ T3961] EXT4-fs (loop3): Total free blocks count 0 [ 48.203562][ T3961] EXT4-fs (loop3): Free/Dirty block details [ 48.209638][ T3961] EXT4-fs (loop3): free_blocks=2415919104 [ 48.215393][ T3961] EXT4-fs (loop3): dirty_blocks=16 [ 48.220503][ T3961] EXT4-fs (loop3): Block reservation details [ 48.226503][ T3961] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 48.249628][ T3519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.281579][ T3813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.314887][ T3982] loop3: detected capacity change from 0 to 512 [ 48.315617][ T3813] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.327571][ T3982] EXT4-fs: Ignoring removed oldalloc option [ 48.341710][ T3982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.354168][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.361259][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.376562][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.391053][ T3982] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.406277][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.413570][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.424792][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.639750][ T3813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.717474][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.740036][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 48.821524][ T4021] bridge_slave_1: left allmulticast mode [ 48.827944][ T4021] bridge_slave_1: left promiscuous mode [ 48.834016][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.867322][ T4021] bridge_slave_0: left allmulticast mode [ 48.873325][ T4021] bridge_slave_0: left promiscuous mode [ 48.879018][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.956438][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 49.027212][ T4045] loop3: detected capacity change from 0 to 128 [ 49.037539][ T3813] veth0_vlan: entered promiscuous mode [ 49.049698][ T3813] veth1_vlan: entered promiscuous mode [ 49.116046][ T3813] veth0_macvtap: entered promiscuous mode [ 49.136050][ T3813] veth1_macvtap: entered promiscuous mode [ 49.146421][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.156926][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.166789][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.169910][ T4045] syz.3.105: attempt to access beyond end of device [ 49.169910][ T4045] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 49.177221][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.177235][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.211058][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.223116][ T3813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.242250][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.252745][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.262658][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.263462][ T4044] syz.3.105: attempt to access beyond end of device [ 49.263462][ T4044] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 49.273371][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.273386][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.307663][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.315304][ T4045] syz.3.105: attempt to access beyond end of device [ 49.315304][ T4045] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 49.317563][ T3813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.331781][ T4045] syz.3.105: attempt to access beyond end of device [ 49.331781][ T4045] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 49.340951][ T3813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.344945][ T3813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.373459][ T3813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.382344][ T3813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.391072][ T3813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.399858][ T3813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.916054][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 49.916066][ T29] audit: type=1400 audit(1728578468.368:775): avc: denied { read write } for pid=4085 comm="syz.1.110" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.916302][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.922349][ T29] audit: type=1400 audit(1728578468.368:776): avc: denied { open } for pid=4085 comm="syz.1.110" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.977759][ T29] audit: type=1400 audit(1728578468.368:777): avc: denied { ioctl } for pid=4085 comm="syz.1.110" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.002534][ T29] audit: type=1400 audit(1728578468.398:778): avc: denied { create } for pid=4087 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.028367][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.049302][ T4086] xt_hashlimit: max too large, truncated to 1048576 [ 50.186910][ T4090] Process accounting resumed [ 50.191550][ T4090] kernel write not supported for file /asound/timers (pid: 4090 comm: syz.4.109) [ 50.234326][ T29] audit: type=1400 audit(1728578468.638:779): avc: denied { setopt } for pid=4087 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.374905][ T29] audit: type=1400 audit(1728578468.828:780): avc: denied { create } for pid=4091 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.498267][ T29] audit: type=1400 audit(1728578468.948:781): avc: denied { name_bind } for pid=4093 comm="syz.0.112" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.519923][ T29] audit: type=1400 audit(1728578468.948:782): avc: denied { node_bind } for pid=4093 comm="syz.0.112" saddr=::ffff:172.20.20.170 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.547808][ T29] audit: type=1400 audit(1728578468.998:783): avc: denied { create } for pid=4093 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.568319][ T29] audit: type=1400 audit(1728578468.998:784): avc: denied { write } for pid=4093 comm="syz.0.112" path="socket:[6072]" dev="sockfs" ino=6072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.726677][ T4103] loop0: detected capacity change from 0 to 1024 [ 50.746175][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.667722][ T3813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.715747][ T4119] netlink: 'syz.1.120': attribute type 12 has an invalid length. [ 51.723538][ T4119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.120'. [ 51.730774][ T4121] loop0: detected capacity change from 0 to 256 [ 51.766914][ T4121] FAT-fs (loop0): Directory bread(block 64) failed [ 51.773486][ T4121] FAT-fs (loop0): Directory bread(block 65) failed [ 51.780552][ T4121] FAT-fs (loop0): Directory bread(block 66) failed [ 51.794476][ T4121] FAT-fs (loop0): Directory bread(block 67) failed [ 51.811429][ T4121] FAT-fs (loop0): Directory bread(block 68) failed [ 51.824408][ T4121] FAT-fs (loop0): Directory bread(block 69) failed [ 51.830976][ T4121] FAT-fs (loop0): Directory bread(block 70) failed [ 51.854336][ T4121] FAT-fs (loop0): Directory bread(block 71) failed [ 51.864438][ T4121] FAT-fs (loop0): Directory bread(block 72) failed [ 51.881125][ T4121] FAT-fs (loop0): Directory bread(block 73) failed [ 52.112045][ T4132] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 52.122849][ T4132] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 52.122849][ T4132] program syz.1.124 not setting count and/or reply_len properly [ 52.304483][ T4143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4143 comm=syz.1.129 [ 52.305559][ T4121] syz.0.119: attempt to access beyond end of device [ 52.305559][ T4121] loop0: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 52.330930][ T4121] syz.0.119: attempt to access beyond end of device [ 52.330930][ T4121] loop0: rw=2049, sector=1864, nr_sectors = 8 limit=256 [ 52.349843][ T4143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'. [ 52.359017][ T4143] unsupported nlmsg_type 40 [ 52.592347][ T4151] hub 9-0:1.0: USB hub found [ 52.598631][ T4151] hub 9-0:1.0: 8 ports detected [ 52.870924][ T4164] loop0: detected capacity change from 0 to 512 [ 52.892195][ T4166] syz.1.136 uses obsolete (PF_INET,SOCK_PACKET) [ 52.900848][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 52.909725][ T4166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.918409][ T4166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.918954][ T4164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.925835][ T4166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.945711][ T4164] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.971013][ T4158] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 52.990278][ T4157] Process accounting resumed [ 52.998477][ T3813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.201884][ T4184] loop3: detected capacity change from 0 to 1024 [ 53.202386][ T4185] netlink: 3 bytes leftover after parsing attributes in process `syz.1.148'. [ 53.217496][ T4185] 0X: renamed from caif0 [ 53.223521][ T4185] 0X: entered allmulticast mode [ 53.228918][ T4185] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 53.229519][ T4184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.283239][ T4184] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.299952][ T4184] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 53.312302][ T4184] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.312302][ T4184] [ 53.321995][ T4184] EXT4-fs (loop3): Total free blocks count 0 [ 53.327982][ T4184] EXT4-fs (loop3): Free/Dirty block details [ 53.333877][ T4184] EXT4-fs (loop3): free_blocks=68451041280 [ 53.339679][ T4184] EXT4-fs (loop3): dirty_blocks=32 [ 53.344798][ T4184] EXT4-fs (loop3): Block reservation details [ 53.350759][ T4184] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 53.367372][ T4190] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 53.551469][ T4184] SELinux: policydb version -1682183729 does not match my version range 15-33 [ 53.560547][ T4184] SELinux: failed to load policy [ 53.617277][ T4196] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.629028][ T4196] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 53.786841][ T4213] netlink: 240 bytes leftover after parsing attributes in process `syz.3.153'. [ 53.799344][ T4213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.809732][ T4213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.877560][ T4213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.887948][ T4213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.932416][ T4217] loop4: detected capacity change from 0 to 128 [ 53.939709][ T4217] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.952625][ T4217] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.996806][ T4213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.007172][ T4213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.022747][ T4219] mmap: syz.0.155 (4219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.088690][ T4213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.099144][ T4213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.142387][ T4213] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.150659][ T4213] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.162548][ T4213] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.171031][ T4213] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.183273][ T4213] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.191509][ T4213] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.202647][ T4213] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.210990][ T4213] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.446627][ T4220] ================================================================== [ 54.454725][ T4220] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 54.462462][ T4220] [ 54.464785][ T4220] write to 0xffff888106c5e614 of 4 bytes by task 4217 on cpu 1: [ 54.472420][ T4220] xas_set_mark+0x131/0x150 [ 54.476945][ T4220] tag_pages_for_writeback+0xa5/0x2a0 [ 54.482336][ T4220] writeback_iter+0x351/0x830 [ 54.487030][ T4220] write_cache_pages+0x4b/0x100 [ 54.491891][ T4220] mpage_writepages+0x72/0xf0 [ 54.496577][ T4220] fat_writepages+0x24/0x30 [ 54.501095][ T4220] do_writepages+0x1d8/0x480 [ 54.505690][ T4220] filemap_fdatawrite_wbc+0xdb/0x100 [ 54.510987][ T4220] file_write_and_wait_range+0xc4/0x250 [ 54.516542][ T4220] __generic_file_fsync+0x46/0x140 [ 54.521657][ T4220] fat_file_fsync+0x46/0x100 [ 54.526259][ T4220] vfs_fsync_range+0x116/0x130 [ 54.531031][ T4220] generic_file_write_iter+0x185/0x1c0 [ 54.536506][ T4220] iter_file_splice_write+0x5f1/0x980 [ 54.541887][ T4220] direct_splice_actor+0x160/0x2c0 [ 54.547001][ T4220] splice_direct_to_actor+0x302/0x670 [ 54.552377][ T4220] do_splice_direct+0xd7/0x150 [ 54.557163][ T4220] do_sendfile+0x39b/0x970 [ 54.561586][ T4220] __x64_sys_sendfile64+0x110/0x150 [ 54.566786][ T4220] x64_sys_call+0xed5/0x2d60 [ 54.571378][ T4220] do_syscall_64+0xc9/0x1c0 [ 54.575880][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.581794][ T4220] [ 54.584116][ T4220] read to 0xffff888106c5e614 of 4 bytes by task 4220 on cpu 0: [ 54.591658][ T4220] filemap_fdatawrite_wbc+0x5c/0x100 [ 54.596973][ T4220] file_write_and_wait_range+0xc4/0x250 [ 54.602530][ T4220] __generic_file_fsync+0x46/0x140 [ 54.607659][ T4220] fat_file_fsync+0x46/0x100 [ 54.612245][ T4220] vfs_fsync_range+0x116/0x130 [ 54.617002][ T4220] generic_file_write_iter+0x185/0x1c0 [ 54.622449][ T4220] iter_file_splice_write+0x5f1/0x980 [ 54.627811][ T4220] direct_splice_actor+0x160/0x2c0 [ 54.632939][ T4220] splice_direct_to_actor+0x302/0x670 [ 54.638298][ T4220] do_splice_direct+0xd7/0x150 [ 54.643051][ T4220] do_sendfile+0x39b/0x970 [ 54.647458][ T4220] __x64_sys_sendfile64+0x110/0x150 [ 54.652643][ T4220] x64_sys_call+0xed5/0x2d60 [ 54.657226][ T4220] do_syscall_64+0xc9/0x1c0 [ 54.661717][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.667608][ T4220] [ 54.669921][ T4220] value changed: 0x02000021 -> 0x04000021 [ 54.675619][ T4220] [ 54.677923][ T4220] Reported by Kernel Concurrency Sanitizer on: [ 54.684060][ T4220] CPU: 0 UID: 0 PID: 4220 Comm: syz.4.154 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 54.694718][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.704769][ T4220] ================================================================== [ 54.802624][ T1865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)