last executing test programs: 2.105856147s ago: executing program 3 (id=192): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 2.013665521s ago: executing program 3 (id=194): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x18, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x90) 1.925654674s ago: executing program 3 (id=198): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)={0x109040, 0x14, 0x14}, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffb, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xa) sendfile(r2, r2, 0x0, 0x100000000) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 1.668716824s ago: executing program 0 (id=204): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 1.596122225s ago: executing program 0 (id=207): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") (async) r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/154, 0x9a}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000800)=""/65, 0x41}], 0x6, &(0x7f0000000900)=""/177, 0xb1}, 0x1f}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000b00)=""/229, 0xe5}, {&(0x7f0000000c00)=""/115, 0x73}, {&(0x7f0000000c80)=""/87, 0x57}], 0x5}, 0x4}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/9, 0x9}, {&(0x7f0000001dc0)=""/225, 0xe1}, {&(0x7f0000001ec0)=""/86, 0x56}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/27, 0x1b}, {&(0x7f0000002f80)=""/170, 0xaa}, {&(0x7f0000003040)=""/96, 0x60}], 0x8}, 0x401}], 0x3, 0x40002022, 0x0) (async) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/154, 0x9a}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000800)=""/65, 0x41}], 0x6, &(0x7f0000000900)=""/177, 0xb1}, 0x1f}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000b00)=""/229, 0xe5}, {&(0x7f0000000c00)=""/115, 0x73}, {&(0x7f0000000c80)=""/87, 0x57}], 0x5}, 0x4}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/9, 0x9}, {&(0x7f0000001dc0)=""/225, 0xe1}, {&(0x7f0000001ec0)=""/86, 0x56}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/27, 0x1b}, {&(0x7f0000002f80)=""/170, 0xaa}, {&(0x7f0000003040)=""/96, 0x60}], 0x8}, 0x401}], 0x3, 0x40002022, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003240)={0x2, &(0x7f0000003200)=[{0x6, 0x1f, 0x20, 0x7}, {0x7, 0x0, 0x5, 0x5}]}) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0) fsync(r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 1.444496909s ago: executing program 0 (id=210): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x81b, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x772}]}}}]}, 0x3c}}, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x0, 0x1e0) copy_file_range(r7, 0x0, r8, &(0x7f0000000080), 0xffffffffffffff2e, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x54, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fdad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8}]}, 0x54}}, 0x0) 1.283192323s ago: executing program 1 (id=212): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x1a, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.23548502s ago: executing program 0 (id=215): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 1.10891179s ago: executing program 1 (id=217): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 1.10862452s ago: executing program 0 (id=218): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)={0x109040, 0x14, 0x14}, 0x18) openat(r0, &(0x7f0000000240)='./bus\x00', 0xca000, 0x84) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x7ffffb, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) sendfile(r3, r3, 0x0, 0x100000000) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) r5 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xa9a\xa3\xa9\xd3\xfa\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3\b\x00t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x06\x00\x00\x00\x00\x00\x00\x00\xb6Pr\xd4\xb5X\\\xdbD\x03\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\x00\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCu\x82\xac\x03,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\xa4\x8a\xc8X:\xe3n\ns\xb8\xb1\xac\xc3A\x98\x92#\xab0\x9e\xdaW\x11\xc3\xcd\x1b\xe0]\x9a\xf2G\xc0\x1a\x00\x8aL\xd0\xe3lJ\x06\xe9\x16U@*\x10\xc2\xac\xd6A\x9d>\x87\x99\xdcl\x03\xd0\x94\xdcT\xe3\xee:\xc2go\xe6\x1b\xa34&\x10\xe1\xec@\x8f5\x8e\xbc\xb1\xf6\xed\xb12\x80J*\x8d\xe2V\x03O\xa6$\xe0\x94\xedKJ\x1a\xfa\xec+\x92\xf36\xd0\'\xa7Za\xc4 \xf2\xd99\xa5\xb3e\x9f\xc1\x87\nE\x8f\x03\xeb\x8d:R\xfc\xd3\x19\xb1\x98\xfd\xbenO\xb2t[\xde\xb8\xd9\x01\xdd\xa2\xcf\xd8O\x9c?E9D\x8d[|9\x98\xa82H^\x02H\xee\x1f\xd5\xcd\xe7po3\x92\xa8\xac\xc9\xd5\x8f\xe3I\x9a\xd9\x9f\x9bH\x9b\x06q&b\x92!\xc4\xebL\xcaY\x0e\xcakk\x11\xef\x01\x8c]@\x13\xafx\x17\x96I\x80\x14\xd6\xbbE\xf3\xb0\xaf&\v\x8f\xc9V\xbe~\x12d\xbd2\x1b/o/\xf89\x1b\xe5\x8e\x19\x1b\xed\xfet\xb7\xab\x13Z\xe5\xb6\x88\x19\xa3U\xd7\xb3r\x1aw\xe3*\x8b\x00', 0x0) lseek(r5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r6, 0x62c21a4ade68aba1, 0x0, 0x0, {{}, {@val={0x8, 0x5, 0x24}, @val={0x8}, @void}}}, 0x24}}, 0x40000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0xd8, r6, 0x2, 0x70bd29, 0x0, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x22, 0xfa, "a0d8533a405bbf788cac270bbe5504d7c4ef40ccc3e302a0f8a942815a66"}], @NL80211_ATTR_IE={0x71, 0x2a, [@mic={0x8c, 0x18, {0x37, "303dec1c6153", @long="48aded14e18d95e55a8593529f93e194"}}, @random_vendor={0xdd, 0x42, "02396b043878b9a7d922107ed90f96f57729c717da953c2446c7cdaeb559baccf90c9d8af1c3148c6a1f91edb786a95f4b09658496c73664675f2c289a6a8ae5f7c3"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x40}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x3c, 0x8}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x3}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x101}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x20044001) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, r6, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x51, 0xc5, "2aa43aa10892a1e7b0ae4f79f7223804c59f2db9862c2e902e56a09fa2aea97b7bb0b35db4f05a16cc5f1f30f9e3bf1861c82a9c6511ef2e989a52bdca2ea98735f04f3b6d9851a1ab0d6d6d70"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x16, 0xc5, "1bb7d295679cdbe89fe86c4a81c6abddf22d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0xc0}}, 0x894) 1.103957671s ago: executing program 1 (id=219): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x18, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x90) 1.009102115s ago: executing program 1 (id=222): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000005c0)={0x3, 0x1, 0x8ebd, 0xe, 0x6, "646697f1673d0ccf"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) readv(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x6e503, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000001bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0xffffffffffffff1b}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) io_setup(0x20, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x9, 0x3, 0x0, 0x2}) syncfs(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @loopback, @dev, 0x0, 0x8, 0x0, 0x7ff}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 936.800306ms ago: executing program 3 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710004000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x28000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000080)=0x13) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000030601010000000000000000bb3aac52daeaa090ae0000000071c51879f7878bc1020031fbaa6abe"], 0x14}}, 0x0) 860.835458ms ago: executing program 3 (id=226): io_uring_setup(0x1cba, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) setitimer(0x1, &(0x7f0000001980)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000001c00)) socket$inet_dccp(0x2, 0x6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw\x00') read(r3, &(0x7f0000000140)=""/56, 0x38) pread64(r3, &(0x7f0000000040)=""/91, 0x5b, 0x8af9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x563842, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4803, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1, 0x65d, &(0x7f00000002c0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x358}}, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = memfd_create(&(0x7f0000000000)='*~\x00', 0x0) r7 = socket$inet6_icmp(0xa, 0x3, 0x3a) dup3(r6, r7, 0x0) fsetxattr(r7, &(0x7f00000001c0)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 860.576258ms ago: executing program 2 (id=227): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') lseek(r0, 0x73, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x280, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000040)='pim6reg0\x00', 0x0, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0xfdef) ioperm(0x0, 0x4, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) semget$private(0x0, 0x3, 0x0) semop(0x0, &(0x7f0000000040)=[{0x2}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, r3, 0x0) setfsgid(0xee00) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) keyctl$restrict_keyring(0x4, 0xfffffffffffffffc, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x1000}, 0x10) r11 = syz_open_procfs(r7, &(0x7f0000000080)='io\x00') fchownat(r11, &(0x7f00000000c0)='./file0\x00', r8, r9, 0x800) write(r5, &(0x7f0000000000)="2000000012005f0214f9f4070000fbe40a0000000000", 0x16) setresgid(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='swiotlb_bounced\x00'}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) 843.303731ms ago: executing program 4 (id=228): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x54, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 840.719111ms ago: executing program 2 (id=229): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68"], 0x97, 0x2a9, &(0x7f0000000500)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 772.912881ms ago: executing program 4 (id=230): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 772.490911ms ago: executing program 1 (id=231): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114d000000000085100000027c0ee4b92ace27d10a7c50fb1a000000850000004000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x8, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000110000000c00098008000100176700004b8c7617591ba24c28b4d7ae1c0b163703355df74ce3ee9e6b7bd0580176640e01209a8bdb223152775118741872e57416ed2eb8d61a136dd58ce908cbc6128cf8d93576f17af5371dcff22c3fac4f14d13214af209d285be8f8ba23e4a4f8908e47c846c31036cd9fd0a8a95870b34438c1742a1871b791682d5b15e2ef6e25cf89af386b94a6a2f1c6c460"], 0x20}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000680)={{}, {0xe}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = io_uring_setup(0x15ae, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x40, 0x70}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 772.103131ms ago: executing program 4 (id=232): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x18, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x90) 741.040546ms ago: executing program 4 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) socket$qrtr(0x2a, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") socket$inet6(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000600)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}, {@minixdf}, {@nodiscard}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x149d7f, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r2, 0x2007fff) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000002c0)={{0x0, 0x3, 0x401, 0x3, 0x7}, 0x10001, 0xd3e8, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x80000000, 0x5, 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 735.190187ms ago: executing program 2 (id=234): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100", @ANYBLOB="000000000000000014001680100001800c"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IEDIJA4FAkJDnCMkrQqdRvUBIlWFRSEygkhJO6II/8CJ7ggxAmJK9xRpQr10paT0dq7ie3YbuLaNcWfj7TtzO5sZr7eHXtmxw5gaE1m/yQRuyLi94gYr2UbC0zW/rtx7eLCzWsXF5KoVN76K6mWu37t4kJRtDhvZ56ZSiPSz5I40KLelfMXTs+Xy0vn8vzM6pn3Z1bOX3j21Jn5k0snl87OHTt29MjsC8/PPdeTOLM2Xd//0fLBfa+/+9Ubx79oiL8pjh6Z7HTwiUqlx9UN1u66dDIywIawJaWIyC7XaLX/j0cp1i/eeLz26UAbB/RVpVKp7Gx/+FIF+A9LojGvy8OwKD7os/lvsTUPAl7q3/Bj4K6+XJsAZXHfyLfakZFI8zKjTfPbXpqMiHcu/f1NtkV/nkMAADT4IRv/PNNq/JfG/XXl/p+vDU1ExD0RsSci7o2IvRFxX0S17AMR8eAW629eJNk4/kmvdBXYJmXjvxfzta3G8V8x+ouJUp7bXY1/NDlxqrx0OH9NpmJ0W5af7VDHj6/+9mW7Y/Xjv2zL6i/Ggnk7roxsazxncX51/nZirnf1k4j9I63iT9ZWApKI2BcR+7us49RT3x1sd+zW8XfQg3WmyrcRT9au/6Voir+QdF6fnPlflJcOzxR3xUa//Hr5zXb131b8PZBd/x0t7/+1+CeS+vXala3XcfmPz9vOabq9/8eSt6vpsXzfh/Orq+dmI8aS47VG1++fWz+3yBfls/inDrXu/3ti/ZU4EBHZTfxQRDwcEY/kbX80Ih6LiEMd4v/5lcff6z7+/sriX9zS9V9PjEXzntaJ0umfvm+odGJD/Dc7X/+j1dRUvmcz73+baVd3dzMAAADcfdKI2BVJOr2WTtPp6dr35ffGjrS8vLL69InlD84u1n4jMBGjafGka7zueehsPq0v8nNR+2pBkT+SPzf+urS9mp9eWC4vDjp4GHI72/T/zJ+lQbcO6Du/14Lhpf/D8NL/YXjp/zC8WvT/7YNoB3Dntfr8/3gA7QDuvKb+b9kPhoj5Pwwv/R+Gl/4PQ2lle9z6R/IdE8Vf6vJ0ibs0Eem/ohkSfUoM9n0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/4JAAD//3sE4iY=") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001ec0)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b90703600000f0", 0x0, 0x0, 0x12000000, 0x5d, 0x0, &(0x7f00000013c0)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d6", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x1, 0x8001, 0x1f}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x4, 0x6, 0x1}], 0x10, 0xff}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 719.33532ms ago: executing program 1 (id=235): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)={0x109040, 0x14, 0x14}, 0x18) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffb, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xa) sendfile(r2, r2, 0x0, 0x100000000) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 644.817701ms ago: executing program 3 (id=236): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="180500f1a1d739470d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0}, 0x90) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0xc0481273, &(0x7f0000000000)) 574.789551ms ago: executing program 4 (id=238): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0x104, 0x0) lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.upper\x00', 0x0, 0x102) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff}, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffff}, 0x0, 0x0, r0, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket(0xa, 0x3, 0x3a) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106000000000000000008000100"], 0x20}}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) fstatfs(r0, &(0x7f0000000380)=""/56) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20001}, 0x24048090) 555.194785ms ago: executing program 2 (id=239): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003010102000000000000000002000000100001000c000280040001ee000000000c0019800800010008"], 0x30}}, 0x0) 471.425418ms ago: executing program 4 (id=240): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getdents64(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000005f3e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='block_bio_remap\x00', r2}, 0x10) io_setup(0x200, &(0x7f0000000100)=0x0) io_pgetevents(r3, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0, &(0x7f0000000140)={&(0x7f00000000c0), 0x8}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x200000000000006f, &(0x7f0000003f00)=[&(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x100, 0x4fa2, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4080810) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20040045) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r12, 0x4004550c, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080006000000000005001900000000000800070003000000"], 0x44}}, 0x0) syz_pidfd_open(r9, 0x0) 416.738045ms ago: executing program 2 (id=241): socket$inet(0x2, 0x2, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1000004, 0xfffffffe}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300), 0x4) (async) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@quota}]}, 0x1, 0x556, &(0x7f0000001100)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) (async) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async, rerun: 32) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0) (async, rerun: 32) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) 329.01886ms ago: executing program 2 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) r4 = dup(r2) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@noinit_itable}, {@sysvgroups}, {@errors_remount}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r7}}, 0x48) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000080)=""/54, 0x36) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') 0s ago: executing program 0 (id=243): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x18, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x90) kernel console output (not intermixed with test programs): [ 18.537939][ T29] audit: type=1400 audit(1719651937.221:81): avc: denied { read } for pid=2764 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 19.602233][ T29] audit: type=1400 audit(1719651938.281:82): avc: denied { mounton } for pid=3065 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.603123][ T3065] cgroup: Unknown subsys name 'net' [ 19.624949][ T29] audit: type=1400 audit(1719651938.281:83): avc: denied { mount } for pid=3065 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.652362][ T29] audit: type=1400 audit(1719651938.321:84): avc: denied { unmount } for pid=3065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.818330][ T3065] cgroup: Unknown subsys name 'rlimit' [ 19.941230][ T29] audit: type=1400 audit(1719651938.621:85): avc: denied { create } for pid=3065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.961771][ T29] audit: type=1400 audit(1719651938.621:86): avc: denied { write } for pid=3065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.982188][ T29] audit: type=1400 audit(1719651938.621:87): avc: denied { read } for pid=3065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.989657][ T3066] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.002418][ T29] audit: type=1400 audit(1719651938.621:88): avc: denied { mounton } for pid=3065 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.036092][ T29] audit: type=1400 audit(1719651938.621:89): avc: denied { mount } for pid=3065 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.059573][ T29] audit: type=1400 audit(1719651938.701:90): avc: denied { relabelto } for pid=3066 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 20.085154][ T29] audit: type=1400 audit(1719651938.701:91): avc: denied { write } for pid=3066 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.114347][ T3065] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.564128][ T3073] chnl_net:caif_netlink_parms(): no params data found [ 20.648467][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.655683][ T3073] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.662935][ T3073] bridge_slave_0: entered allmulticast mode [ 20.669527][ T3073] bridge_slave_0: entered promiscuous mode [ 20.676146][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.683754][ T3073] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.690896][ T3073] bridge_slave_1: entered allmulticast mode [ 20.697365][ T3073] bridge_slave_1: entered promiscuous mode [ 20.727529][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 20.737160][ T3073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 20.749063][ T3073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 20.790114][ T3073] team0: Port device team_slave_0 added [ 20.805328][ T3073] team0: Port device team_slave_1 added [ 20.815565][ T3080] chnl_net:caif_netlink_parms(): no params data found [ 20.828596][ T3074] chnl_net:caif_netlink_parms(): no params data found [ 20.856581][ T3073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 20.863569][ T3073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.889589][ T3073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 20.917638][ T3073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 20.924675][ T3073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.950614][ T3073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 20.968781][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.975854][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.983118][ T3082] bridge_slave_0: entered allmulticast mode [ 20.989478][ T3082] bridge_slave_0: entered promiscuous mode [ 21.012823][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.019953][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.027123][ T3082] bridge_slave_1: entered allmulticast mode [ 21.033594][ T3082] bridge_slave_1: entered promiscuous mode [ 21.051417][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.058641][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.065785][ T3080] bridge_slave_0: entered allmulticast mode [ 21.072131][ T3080] bridge_slave_0: entered promiscuous mode [ 21.089471][ T3093] chnl_net:caif_netlink_parms(): no params data found [ 21.100106][ T3073] hsr_slave_0: entered promiscuous mode [ 21.106023][ T3073] hsr_slave_1: entered promiscuous mode [ 21.112347][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.119424][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.126553][ T3080] bridge_slave_1: entered allmulticast mode [ 21.133017][ T3080] bridge_slave_1: entered promiscuous mode [ 21.165153][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.175420][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.184618][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.191749][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.198960][ T3074] bridge_slave_0: entered allmulticast mode [ 21.205299][ T3074] bridge_slave_0: entered promiscuous mode [ 21.214479][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.221717][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.228864][ T3074] bridge_slave_1: entered allmulticast mode [ 21.235119][ T3074] bridge_slave_1: entered promiscuous mode [ 21.266608][ T3080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.276836][ T3074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.293210][ T3080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.303082][ T3074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.324097][ T3082] team0: Port device team_slave_0 added [ 21.330548][ T3082] team0: Port device team_slave_1 added [ 21.349512][ T3074] team0: Port device team_slave_0 added [ 21.355852][ T3074] team0: Port device team_slave_1 added [ 21.382331][ T3080] team0: Port device team_slave_0 added [ 21.392768][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.399733][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.425716][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.437029][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.443970][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.469958][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.487876][ T3080] team0: Port device team_slave_1 added [ 21.500347][ T3074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.507319][ T3074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.533331][ T3074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.547094][ T3074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.554090][ T3074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.579988][ T3074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.590770][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.597845][ T3093] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.605016][ T3093] bridge_slave_0: entered allmulticast mode [ 21.611537][ T3093] bridge_slave_0: entered promiscuous mode [ 21.642273][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.649431][ T3093] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.656596][ T3093] bridge_slave_1: entered allmulticast mode [ 21.662952][ T3093] bridge_slave_1: entered promiscuous mode [ 21.695091][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.702245][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.728164][ T3080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.739233][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.746165][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.772101][ T3080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.794364][ T3074] hsr_slave_0: entered promiscuous mode [ 21.800526][ T3074] hsr_slave_1: entered promiscuous mode [ 21.806430][ T3074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 21.813990][ T3074] Cannot create hsr debugfs directory [ 21.826000][ T3093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.836371][ T3093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.847372][ T3082] hsr_slave_0: entered promiscuous mode [ 21.853306][ T3082] hsr_slave_1: entered promiscuous mode [ 21.859106][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 21.866892][ T3082] Cannot create hsr debugfs directory [ 21.905632][ T3080] hsr_slave_0: entered promiscuous mode [ 21.911814][ T3080] hsr_slave_1: entered promiscuous mode [ 21.917742][ T3080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 21.925280][ T3080] Cannot create hsr debugfs directory [ 21.931515][ T3093] team0: Port device team_slave_0 added [ 21.952178][ T3093] team0: Port device team_slave_1 added [ 21.980391][ T3073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 21.990868][ T3073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 22.001699][ T3073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 22.010504][ T3093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.017525][ T3093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.043953][ T3093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.059078][ T3073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 22.076410][ T3093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.083423][ T3093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.109347][ T3093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.159395][ T3093] hsr_slave_0: entered promiscuous mode [ 22.165390][ T3093] hsr_slave_1: entered promiscuous mode [ 22.171379][ T3093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 22.179039][ T3093] Cannot create hsr debugfs directory [ 22.259288][ T3074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 22.273063][ T3074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 22.282223][ T3074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 22.304321][ T3074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 22.337612][ T3080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 22.346237][ T3080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 22.365370][ T3080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 22.375335][ T3080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 22.390908][ T3073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.405374][ T3082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 22.413885][ T3082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 22.423553][ T3082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 22.432405][ T3082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 22.455333][ T3073] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.481975][ T3093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 22.490711][ T3093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 22.499998][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.507116][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.527152][ T3093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 22.541311][ T3093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 22.550599][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.557675][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.596323][ T3073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 22.606763][ T3073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.624701][ T3074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.647375][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.668477][ T3074] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.677783][ T3080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.694424][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.704437][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.711576][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.728538][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.735746][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.745250][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.752301][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.761636][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.768683][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.785432][ T3073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.794298][ T3093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.809349][ T3080] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.820584][ T3074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 22.831039][ T3074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.866295][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.873471][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.882197][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.889353][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.904615][ T3093] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.917583][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.924694][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.942472][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.949735][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.970043][ T3074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.985546][ T3080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 22.996135][ T3080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.025118][ T3093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.035618][ T3093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.085997][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.107952][ T3080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.170188][ T3073] veth0_vlan: entered promiscuous mode [ 23.198296][ T3093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.215295][ T3074] veth0_vlan: entered promiscuous mode [ 23.234745][ T3073] veth1_vlan: entered promiscuous mode [ 23.247058][ T3074] veth1_vlan: entered promiscuous mode [ 23.263833][ T3073] veth0_macvtap: entered promiscuous mode [ 23.287053][ T3074] veth0_macvtap: entered promiscuous mode [ 23.296205][ T3082] veth0_vlan: entered promiscuous mode [ 23.307923][ T3073] veth1_macvtap: entered promiscuous mode [ 23.317161][ T3074] veth1_macvtap: entered promiscuous mode [ 23.331112][ T3073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.344823][ T3073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.355181][ T3093] veth0_vlan: entered promiscuous mode [ 23.361460][ T3082] veth1_vlan: entered promiscuous mode [ 23.377939][ T3073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.387210][ T3073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.395957][ T3073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.404717][ T3073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.414822][ T3074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.425279][ T3074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.435933][ T3074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.447252][ T3093] veth1_vlan: entered promiscuous mode [ 23.453355][ T3074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.463876][ T3074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.474801][ T3074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.490350][ T3074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.499214][ T3074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.507997][ T3074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.516862][ T3074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.530205][ T3080] veth0_vlan: entered promiscuous mode [ 23.549396][ T3082] veth0_macvtap: entered promiscuous mode [ 23.560245][ T3080] veth1_vlan: entered promiscuous mode [ 23.571945][ T3082] veth1_macvtap: entered promiscuous mode [ 23.586215][ T3093] veth0_macvtap: entered promiscuous mode [ 23.611604][ T3093] veth1_macvtap: entered promiscuous mode [ 23.624544][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.635114][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.645046][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.655512][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.666387][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.684855][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.695503][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.705358][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.715791][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.729267][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.748881][ T3082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.757795][ T3082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.766523][ T3082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.775365][ T3082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.784969][ T3230] syz.0.1 (3230) used greatest stack depth: 11728 bytes left [ 23.790934][ T3080] veth0_macvtap: entered promiscuous mode [ 23.800453][ T3080] veth1_macvtap: entered promiscuous mode [ 23.814491][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.825063][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.835425][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.845896][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.855768][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.866305][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.878042][ T3093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.886404][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.896950][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.906866][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.917377][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.927290][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.937831][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.941437][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 23.949906][ T3093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.970855][ T3093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.979814][ T3093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.988703][ T3093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.990796][ T3243] loop1: detected capacity change from 0 to 132 [ 23.997490][ T3093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.021251][ T3243] iso9660: Unknown parameter '184467440737095516150xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿ' [ 24.048098][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.058614][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.068461][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.078979][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.088798][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.099936][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.109947][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.120435][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.132564][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.158184][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.168748][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.178573][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.189326][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.199347][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.209981][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.219822][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.230257][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.242833][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.258549][ T3080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.267450][ T3080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.276268][ T3080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.285027][ T3080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.349626][ T3263] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.395170][ T3265] loop4: detected capacity change from 0 to 512 [ 24.412602][ T3275] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15'. [ 24.421535][ T3265] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 24.429525][ T3265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 24.451596][ T3265] EXT4-fs (loop4): orphan cleanup on readonly fs [ 24.459051][ T3265] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 24.469571][ T3265] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 24.488850][ T3265] EXT4-fs (loop4): 1 truncate cleaned up [ 24.506442][ T3281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 24.518111][ T3265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 24.550639][ T3280] loop0: detected capacity change from 0 to 8192 [ 24.551423][ T3282] loop3: detected capacity change from 0 to 2048 [ 24.563621][ T3265] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.5: dx entry: limit 65535 != root limit 120 [ 24.575558][ T3265] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.5: Corrupt directory, running e2fsck is recommended [ 24.607240][ T3282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 24.612150][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 24.612234][ T29] audit: type=1400 audit(1719651943.291:219): avc: denied { connect } for pid=3289 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.644608][ T3282] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.644899][ T29] audit: type=1400 audit(1719651943.311:220): avc: denied { write } for pid=3279 comm="syz.3.17" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.677135][ T3282] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.681424][ T29] audit: type=1400 audit(1719651943.311:221): avc: denied { add_name } for pid=3279 comm="syz.3.17" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.693360][ T3282] EXT4-fs (loop3): This should not happen!! Data will be lost [ 24.693360][ T3282] [ 24.693378][ T3282] EXT4-fs (loop3): Total free blocks count 0 [ 24.693390][ T3282] EXT4-fs (loop3): Free/Dirty block details [ 24.693401][ T3282] EXT4-fs (loop3): free_blocks=2415919104 [ 24.693445][ T3282] EXT4-fs (loop3): dirty_blocks=16 [ 24.715409][ T29] audit: type=1400 audit(1719651943.311:222): avc: denied { create } for pid=3279 comm="syz.3.17" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.725132][ T3282] EXT4-fs (loop3): Block reservation details [ 24.731140][ T29] audit: type=1400 audit(1719651943.311:223): avc: denied { read append open } for pid=3279 comm="syz.3.17" path="/root/syzkaller.H8o6ZQ/2/file1/cpuset.effective_cpus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.737140][ T3282] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 24.809175][ T29] audit: type=1400 audit(1719651943.311:224): avc: denied { write } for pid=3279 comm="syz.3.17" name="cpuset.effective_cpus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.832219][ T29] audit: type=1400 audit(1719651943.311:225): avc: denied { write } for pid=3279 comm="syz.3.17" name="001" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 24.855014][ T29] audit: type=1400 audit(1719651943.311:226): avc: denied { write } for pid=3289 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.864484][ T3282] syz.3.17 (3282) used greatest stack depth: 10472 bytes left [ 24.874047][ T29] audit: type=1400 audit(1719651943.311:227): avc: denied { ioctl } for pid=3279 comm="syz.3.17" path="/root/syzkaller.H8o6ZQ/2/file1/cpuset.effective_cpus" dev="loop3" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.908905][ T29] audit: type=1400 audit(1719651943.501:228): avc: denied { read } for pid=3262 comm="syz.4.5" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 24.912005][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.014637][ T3307] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.164062][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 25.165112][ T3325] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 25.200193][ T3330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 25.229929][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.251793][ T3337] loop1: detected capacity change from 0 to 256 [ 25.376435][ T3343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 26.063533][ C1] hrtimer: interrupt took 24129 ns [ 26.124187][ T3367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 26.246551][ T3385] loop4: detected capacity change from 0 to 128 [ 26.371468][ T3400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 26.415427][ T3405] loop0: detected capacity change from 0 to 256 [ 26.430384][ T3407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.55'. [ 26.569607][ T3414] xt_CT: No such helper "pptp" [ 26.602582][ T3418] Zero length message leads to an empty skb [ 27.247130][ T3433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 27.303894][ T3441] netlink: 'syz.4.67': attribute type 29 has an invalid length. [ 27.312019][ T3441] netlink: 'syz.4.67': attribute type 29 has an invalid length. [ 27.370871][ T3451] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 27.421444][ T3456] macvlan2: entered promiscuous mode [ 27.484210][ T3460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=3460 comm=syz.0.71 [ 27.613609][ T3484] netlink: 'syz.3.81': attribute type 29 has an invalid length. [ 27.623017][ T3484] netlink: 'syz.3.81': attribute type 29 has an invalid length. [ 27.635495][ T3488] loop1: detected capacity change from 0 to 256 [ 27.686013][ T3493] loop3: detected capacity change from 0 to 164 [ 27.734945][ T3501] syz.4.86 uses obsolete (PF_INET,SOCK_PACKET) [ 28.037397][ T3531] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 28.045206][ T3531] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 28.083756][ T3538] loop2: detected capacity change from 0 to 164 [ 28.608299][ T3577] chnl_net:caif_netlink_parms(): no params data found [ 28.635951][ T3600] loop1: detected capacity change from 0 to 2048 [ 28.648304][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.648443][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.667784][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.676151][ T3577] bridge_slave_0: entered allmulticast mode [ 28.683606][ T3577] bridge_slave_0: entered promiscuous mode [ 28.691522][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.699153][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.707935][ T3577] bridge_slave_1: entered allmulticast mode [ 28.714346][ T3577] bridge_slave_1: entered promiscuous mode [ 28.725865][ T3600] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.742333][ T3600] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 28.754675][ T3600] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.754675][ T3600] [ 28.765268][ T3600] EXT4-fs (loop1): Total free blocks count 0 [ 28.771371][ T3600] EXT4-fs (loop1): Free/Dirty block details [ 28.777524][ T3600] EXT4-fs (loop1): free_blocks=2415919104 [ 28.783243][ T3600] EXT4-fs (loop1): dirty_blocks=32 [ 28.788371][ T3600] EXT4-fs (loop1): Block reservation details [ 28.794349][ T3600] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 28.814437][ T3577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.825067][ T3577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.835306][ T3600] syz.1.113 (3600) used greatest stack depth: 9592 bytes left [ 28.849731][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 28.863591][ T3577] team0: Port device team_slave_0 added [ 28.874987][ T3577] team0: Port device team_slave_1 added [ 28.891846][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.898900][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.911242][ T3620] capability: warning: `syz.1.117' uses deprecated v2 capabilities in a way that may be insecure [ 28.925023][ T3577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.926614][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.953130][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.956435][ T3622] loop1: detected capacity change from 0 to 512 [ 28.979039][ T3577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.987651][ T3622] EXT4-fs: Ignoring removed bh option [ 29.006080][ T3622] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 29.019702][ T3622] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 29.021490][ T3577] hsr_slave_0: entered promiscuous mode [ 29.038182][ T3577] hsr_slave_1: entered promiscuous mode [ 29.038386][ T3622] EXT4-fs: failed to create workqueue [ 29.049328][ T3622] EXT4-fs (loop1): mount failed [ 29.054438][ T3577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.062196][ T3577] Cannot create hsr debugfs directory [ 29.078135][ T3625] loop4: detected capacity change from 0 to 256 [ 29.124113][ T3629] loop1: detected capacity change from 0 to 512 [ 29.135535][ T3629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.140870][ T3577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.148703][ T3629] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.151318][ T3629] EXT4-fs (loop1): 1 truncate cleaned up [ 29.174955][ T3629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.198195][ T3073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.230796][ T3577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.310239][ T3577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.326070][ T3652] __nla_validate_parse: 19 callbacks suppressed [ 29.326084][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 29.389824][ T3662] loop1: detected capacity change from 0 to 512 [ 29.397419][ T3577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.398676][ T3662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.420125][ T3662] EXT4-fs (loop1): 1 truncate cleaned up [ 29.426024][ T3663] loop4: detected capacity change from 0 to 256 [ 29.430401][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.449085][ T3666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'. [ 29.463937][ T3666] syzkaller0: entered allmulticast mode [ 29.470761][ T3073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.500206][ T50] bridge_slave_1: left allmulticast mode [ 29.505965][ T50] bridge_slave_1: left promiscuous mode [ 29.511730][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.519995][ T50] bridge_slave_0: left allmulticast mode [ 29.525656][ T50] bridge_slave_0: left promiscuous mode [ 29.531315][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.652817][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 29.669854][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 29.683207][ T3679] loop4: detected capacity change from 0 to 2048 [ 29.691567][ T50] bond0 (unregistering): Released all slaves [ 29.704211][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 29.704224][ T29] audit: type=1326 audit(1719651948.381:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd55506b99 code=0x0 [ 29.722735][ T3577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.743069][ T3577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.752307][ T3577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.761165][ T3679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.781256][ T3577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.801832][ T3679] netlink: 763 bytes leftover after parsing attributes in process `syz.4.136'. [ 29.819498][ T50] hsr_slave_0: left promiscuous mode [ 29.834492][ T3679] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.852837][ T50] hsr_slave_1: left promiscuous mode [ 29.868144][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.875712][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.893251][ T3679] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 29.905557][ T3679] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.905557][ T3679] [ 29.915288][ T3679] EXT4-fs (loop4): Total free blocks count 0 [ 29.921346][ T3679] EXT4-fs (loop4): Free/Dirty block details [ 29.927330][ T3679] EXT4-fs (loop4): free_blocks=2415919104 [ 29.933129][ T3679] EXT4-fs (loop4): dirty_blocks=32 [ 29.938395][ T3679] EXT4-fs (loop4): Block reservation details [ 29.944500][ T3679] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 29.951856][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.959446][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.971655][ T50] veth1_macvtap: left promiscuous mode [ 29.977246][ T50] veth0_macvtap: left promiscuous mode [ 29.981088][ T3686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 29.982820][ T50] veth1_vlan: left promiscuous mode [ 30.094480][ T3699] loop0: detected capacity change from 0 to 512 [ 30.103418][ T3699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.114531][ T3699] EXT4-fs (loop0): 1 truncate cleaned up [ 30.122138][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.135999][ T50] team0 (unregistering): Port device team_slave_1 removed [ 30.144342][ T3074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.153817][ T50] team0 (unregistering): Port device team_slave_0 removed [ 30.214689][ T3101] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 30.225446][ T3702] loop0: detected capacity change from 0 to 256 [ 30.257404][ T3577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.273990][ T3577] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.284671][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.291908][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.307574][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.314720][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.334529][ T3577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.344940][ T3577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.388615][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 30.470495][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 30.476703][ T3577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.627047][ T3577] veth0_vlan: entered promiscuous mode [ 30.643550][ T3577] veth1_vlan: entered promiscuous mode [ 30.659925][ T3577] veth0_macvtap: entered promiscuous mode [ 30.668839][ T3736] netlink: 'syz.1.151': attribute type 7 has an invalid length. [ 30.679674][ T3577] veth1_macvtap: entered promiscuous mode [ 30.689212][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 30.702903][ T3672] syzkaller0: left allmulticast mode [ 30.710387][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710403][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.710412][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710424][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.710433][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710445][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.710517][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710542][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.711307][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.712181][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.712262][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.712276][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.712286][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.712293][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.712303][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.712310][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.712321][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.713211][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.729693][ T3577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.758852][ T29] audit: type=1400 audit(1719651949.441:328): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 30.759032][ T3577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.933684][ T3577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.933815][ T3577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.244865][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 31.246413][ T3755] loop2: detected capacity change from 0 to 512 [ 31.267482][ T3762] loop3: detected capacity change from 0 to 256 [ 31.267633][ T3755] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 31.281756][ T3755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 31.293141][ T3755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.302003][ T3755] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 31.304613][ T3770] loop0: detected capacity change from 0 to 512 [ 31.312974][ T3755] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 31.330266][ T3770] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 31.340132][ T3755] EXT4-fs (loop2): 1 truncate cleaned up [ 31.346528][ T3755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 31.373937][ T3770] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.161: iget: bad i_size value: -67835469387268086 [ 31.373956][ T3755] EXT4-fs warning (device loop2): dx_probe:892: inode #2: comm syz.2.107: dx entry: limit 65535 != root limit 120 [ 31.398610][ T3776] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.398872][ T3755] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.107: Corrupt directory, running e2fsck is recommended [ 31.416714][ T3770] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.161: couldn't read orphan inode 15 (err -117) [ 31.433728][ T3770] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.446033][ T3770] ext2 filesystem being mounted at /root/syzkaller.dQ1lkG/38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.476520][ T29] audit: type=1400 audit(1719651950.151:329): avc: denied { create } for pid=3779 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 31.499806][ T3781] loop1: detected capacity change from 0 to 512 [ 31.506814][ T29] audit: type=1400 audit(1719651950.181:330): avc: denied { setopt } for pid=3779 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 31.512827][ T3781] EXT4-fs (loop1): unsupported inode size: 264 [ 31.532362][ T3781] EXT4-fs (loop1): blocksize: 1024 [ 31.538639][ T3074] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 31.559652][ T3786] tipc: Started in network mode [ 31.564552][ T3786] tipc: Node identity , cluster identity 4711 [ 31.570738][ T3786] tipc: Failed to obtain node identity [ 31.576193][ T3786] tipc: Enabling of bearer rejected, failed to enable media [ 31.616681][ T3792] loop0: detected capacity change from 0 to 128 [ 31.706297][ T29] audit: type=1400 audit(1719651950.381:331): avc: denied { name_bind } for pid=3791 comm="syz.0.167" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 31.744963][ T3814] loop1: detected capacity change from 0 to 256 [ 31.745482][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 31.845874][ T29] audit: type=1326 audit(1719651950.521:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe397d73b99 code=0x7fc00000 [ 31.871874][ T3828] loop0: detected capacity change from 0 to 256 [ 31.888206][ T3755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.903152][ T29] audit: type=1400 audit(1719651950.581:333): avc: denied { create } for pid=3831 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.903683][ T3832] netlink: 'syz.4.179': attribute type 10 has an invalid length. [ 31.935704][ T3832] geneve1: entered promiscuous mode [ 31.963850][ T3832] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 32.016545][ T3843] loop0: detected capacity change from 0 to 512 [ 32.036221][ T3843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.037952][ T3845] capability: warning: `syz.1.184' uses 32-bit capabilities (legacy support in use) [ 32.053703][ T3843] EXT4-fs (loop0): 1 truncate cleaned up [ 32.062620][ T3843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.086474][ T3074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.095932][ T3845] loop1: detected capacity change from 0 to 512 [ 32.103444][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 32.165144][ T3855] loop1: detected capacity change from 0 to 256 [ 32.251392][ T3871] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.260047][ T3868] veth1_macvtap: left promiscuous mode [ 32.288840][ T3874] loop1: detected capacity change from 0 to 512 [ 32.297477][ T3874] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.305381][ T3874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 32.313691][ T3874] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.321828][ T3874] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 32.332502][ T3874] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 32.333402][ T3877] loop4: detected capacity change from 0 to 512 [ 32.342821][ T3874] EXT4-fs (loop1): 1 truncate cleaned up [ 32.356450][ T3874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 32.379362][ T3877] EXT4-fs (loop4): unsupported inode size: 264 [ 32.385569][ T3877] EXT4-fs (loop4): blocksize: 1024 [ 32.393758][ T3874] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.191: dx entry: limit 65535 != root limit 120 [ 32.394807][ T3881] loop3: detected capacity change from 0 to 256 [ 32.405961][ T3874] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.191: Corrupt directory, running e2fsck is recommended [ 32.501114][ T3887] loop0: detected capacity change from 0 to 512 [ 32.514485][ T3887] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.532240][ T3887] EXT4-fs (loop0): 1 truncate cleaned up [ 32.542162][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.554970][ T3895] tipc: Started in network mode [ 32.559983][ T3895] tipc: Node identity , cluster identity 4711 [ 32.566148][ T3895] tipc: Failed to obtain node identity [ 32.571666][ T3895] tipc: Enabling of bearer rejected, failed to enable media [ 32.583891][ T3074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.608502][ T29] audit: type=1400 audit(1719651951.291:334): avc: denied { block_suspend } for pid=3898 comm="syz.4.200" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.682151][ T29] audit: type=1400 audit(1719651951.361:335): avc: denied { write } for pid=3898 comm="syz.4.200" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 32.713731][ T3910] loop0: detected capacity change from 0 to 256 [ 32.736919][ T29] audit: type=1400 audit(1719651951.421:336): avc: denied { shutdown } for pid=3911 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.842992][ T3921] loop0: detected capacity change from 0 to 256 [ 32.944559][ T3929] loop0: detected capacity change from 0 to 128 [ 32.961946][ T3930] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 33.025006][ T3935] loop2: detected capacity change from 0 to 512 [ 33.033627][ T3935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.050185][ T3935] EXT4-fs (loop2): 1 truncate cleaned up [ 33.057640][ T3935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.091730][ T3577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.137128][ T3939] vlan2: entered promiscuous mode [ 33.142230][ T3939] bond0: entered promiscuous mode [ 33.147396][ T3939] bond_slave_0: entered promiscuous mode [ 33.153289][ T3939] bond_slave_1: entered promiscuous mode [ 33.160133][ T3874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.173160][ T3939] bond0: left promiscuous mode [ 33.178031][ T3939] bond_slave_0: left promiscuous mode [ 33.183510][ T3939] bond_slave_1: left promiscuous mode [ 33.256244][ T3948] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 33.258089][ T3950] loop0: detected capacity change from 0 to 256 [ 33.287591][ T3948] batman_adv: batadv0: Adding interface: team0 [ 33.293799][ T3948] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.319082][ T3948] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 33.403310][ T3965] program syz.2.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.440334][ T3970] loop4: detected capacity change from 0 to 512 [ 33.457938][ T3970] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.473899][ T3970] EXT4-fs (loop4): 1 truncate cleaned up [ 33.481421][ T3970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.512536][ T3080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.678864][ T3993] loop2: detected capacity change from 0 to 256 [ 33.771526][ T4002] loop4: detected capacity change from 0 to 1024 [ 33.780921][ T4002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.795000][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.834648][ T4010] loop2: detected capacity change from 0 to 512 [ 33.849275][ T4010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.870180][ T4010] EXT4-fs (loop2): 1 truncate cleaned up [ 33.882896][ T4010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.907506][ T3080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.924824][ T3577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.021431][ T4014] chnl_net:caif_netlink_parms(): no params data found [ 34.047966][ T4037] loop2: detected capacity change from 0 to 1024 [ 34.055862][ T4037] EXT4-fs: Ignoring removed nobh option [ 34.061491][ T4037] EXT4-fs: Ignoring removed orlov option [ 34.072809][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.080046][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.087317][ T4014] bridge_slave_0: entered allmulticast mode [ 34.091556][ T4037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.094170][ T4014] bridge_slave_0: entered promiscuous mode [ 34.112829][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.119999][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.128340][ T4014] bridge_slave_1: entered allmulticast mode [ 34.135228][ T4014] bridge_slave_1: entered promiscuous mode [ 34.149889][ T3577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.162279][ T4014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.173027][ T4014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.193615][ T4014] team0: Port device team_slave_0 added [ 34.200449][ T4014] team0: Port device team_slave_1 added [ 34.218674][ T4014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.225631][ T4014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.253860][ T4014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.265689][ T4014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.272724][ T4014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.298671][ T4014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.373017][ T4050] loop2: detected capacity change from 0 to 512 [ 34.381180][ T4050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 34.389820][ T4050] System zones: 1-12 [ 34.395842][ T4050] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.242: invalid indirect mapped block 8 (level 2) [ 34.409820][ T4050] EXT4-fs (loop2): Remounting filesystem read-only [ 34.417826][ T4050] EXT4-fs (loop2): 1 truncate cleaned up [ 34.424944][ T4050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.437769][ T4050] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 34.445072][ T4050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.483478][ T4014] hsr_slave_0: entered promiscuous mode [ 34.507853][ T4014] hsr_slave_1: entered promiscuous mode [ 34.516774][ C1] ================================================================== [ 34.524862][ C1] BUG: KCSAN: data-race in can_send / can_stat_update [ 34.531634][ C1] [ 34.533953][ C1] read-write to 0xffff888112e9ad90 of 8 bytes by interrupt on cpu 0: [ 34.542030][ C1] can_send+0x55c/0x5d0 [ 34.546191][ C1] j1939_send_one+0x1a9/0x1e0 [ 34.550868][ C1] j1939_tp_txtimer+0xca9/0x1a70 [ 34.555811][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 34.561015][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 34.566047][ C1] handle_softirqs+0xc3/0x280 [ 34.570731][ C1] run_ksoftirqd+0x1c/0x30 [ 34.575176][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 34.580131][ C1] kthread+0x1d1/0x210 [ 34.584213][ C1] ret_from_fork+0x4b/0x60 [ 34.588630][ C1] ret_from_fork_asm+0x1a/0x30 [ 34.593402][ C1] [ 34.595840][ C1] read to 0xffff888112e9ad90 of 8 bytes by interrupt on cpu 1: [ 34.603389][ C1] can_stat_update+0x1f3/0x6b0 [ 34.608155][ C1] call_timer_fn+0x3a/0x300 [ 34.612664][ C1] __run_timer_base+0x417/0x640 [ 34.617515][ C1] run_timer_softirq+0x31/0x70 [ 34.622284][ C1] handle_softirqs+0xc3/0x280 [ 34.626972][ C1] irq_exit_rcu+0x3e/0x90 [ 34.631310][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 34.636946][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 34.642933][ C1] __tsan_read1+0xe1/0x180 [ 34.647355][ C1] unmap_page_range+0x570/0x21f0 [ 34.652298][ C1] unmap_single_vma+0x142/0x1d0 [ 34.657154][ C1] unmap_vmas+0x18d/0x2b0 [ 34.661494][ C1] exit_mmap+0x18f/0x710 [ 34.665743][ C1] __mmput+0x28/0x1c0 [ 34.669732][ C1] mmput+0x4c/0x60 [ 34.673460][ C1] exit_mm+0xe4/0x190 [ 34.677437][ C1] do_exit+0x556/0x1710 [ 34.681581][ C1] do_group_exit+0x102/0x150 [ 34.686160][ C1] get_signal+0xf2f/0x1080 [ 34.690563][ C1] arch_do_signal_or_restart+0x95/0x4b0 [ 34.696095][ C1] syscall_exit_to_user_mode+0x59/0x130 [ 34.701631][ C1] do_syscall_64+0xd6/0x1c0 [ 34.706124][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.712004][ C1] [ 34.714310][ C1] value changed: 0x0000000000002f26 -> 0x0000000000002f28 [ 34.721398][ C1] [ 34.723700][ C1] Reported by Kernel Concurrency Sanitizer on: [ 34.729840][ C1] CPU: 1 PID: 4053 Comm: syz.0.243 Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0 [ 34.739803][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 34.749841][ C1] ================================================================== [ 34.763388][ T29] kauditd_printk_skb: 7 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 34.763402][ T29] audit: type=1400 audit(1719651953.441:344): avc: denied { write } for pid=3065 comm="syz-executor" path="pipe:[1586]" dev="pipefs" ino=1586 scontext=root:s