last executing test programs: 6.411112295s ago: executing program 0 (id=964): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") splice(r2, 0x0, r1, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = getpid() ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x612f09c534e3d1eb, 0x6, 0x8}) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000000, 0xff54}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001840)={0x0, 0x80000002}, &(0x7f00000018c0)={0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001240), 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 6.196130814s ago: executing program 0 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x5, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x199) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000a04fcff", 0x58}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 5.775973852s ago: executing program 0 (id=972): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/82, 0x52}], 0x1) unshare(0x68040200) socket$kcm(0x2, 0x3, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2b, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}}, {0x8, 0xb, 0x20000000}, {0x6}}]}, 0x4c}}, 0x0) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r5 = dup(r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x16f47e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r9, 0x0) 5.276500348s ago: executing program 3 (id=982): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRESHEX, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x65, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/locks\x00', 0x0, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x29, 0x0, 0x11) socket$netlink(0x10, 0x3, 0x8000000004) 5.015620142s ago: executing program 2 (id=989): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x62040200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_triestat\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0xfffffff7) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) brk(0x9) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r7 = dup3(r6, r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r8, 0x1}, &(0x7f0000000200)=0x8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 4.977184616s ago: executing program 3 (id=990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x983}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r2, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sync() execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x90f, 0x0) 4.156548431s ago: executing program 2 (id=994): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp(0x0, 0x0, 0x0, r0, r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x4, 0x0, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecf14cb9cca7480ef435000000e3bd6efbbf4ae7220b0013200d000100ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_rdma(0x10, 0x3, 0x14) 4.104202915s ago: executing program 3 (id=995): socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) unshare(0x40020000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x4, 0x0, &(0x7f0000000000)="259a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20602, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 3.328247916s ago: executing program 0 (id=973): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x800, @loopback, 0x5b5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x1002, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioprio_get$pid(0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2.787762865s ago: executing program 1 (id=1000): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRESHEX, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x65, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/locks\x00', 0x0, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x29, 0x0, 0x11) socket$netlink(0x10, 0x3, 0x8000000004) 2.62725115s ago: executing program 2 (id=1001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095", @ANYRES32, @ANYRES32, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x798, &(0x7f0000002380)="$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") r1 = openat$rtc(0xffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000003", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000003c0)="dc", 0x1, 0x40000, 0x0, 0x0) shutdown(r4, 0x1) 2.51696393s ago: executing program 1 (id=1002): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x1, @local, 0x3}]}, &(0x7f0000003ac0)=0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') sendfile(r2, r5, 0x0, 0x8000fff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 2.386904422s ago: executing program 3 (id=1004): set_mempolicy(0x4000, &(0x7f0000000080)=0x7e, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) unshare(0x0) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) r0 = shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f000028b000/0x2000)=nil, 0x0) mlockall(0x2) r1 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) mlockall(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x23) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) shmdt(r1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908386d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x103f}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.386396932s ago: executing program 2 (id=1005): eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xcdc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) 2.338186687s ago: executing program 2 (id=1006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x48) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000240)=@get={0x1, 0x0, 0x2}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000400), 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0xff50) 2.111885448s ago: executing program 4 (id=1008): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) pipe(0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xd7, &(0x7f0000000cc0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "61e5b3", 0xa1, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x2c, 0x10, 0x2, 0x2, 0x0, [@loopback, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2, [{0x1, 0x0, "15f307"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000840)={[{@norecovery}, {@nodiscard}, {@noblock_validity}, {@noquota}, {@resuid}, {@mblk_io_submit}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@noload}, {@grpjquota}]}, 0x0, 0x51c, &(0x7f0000000200)="$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") syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.816918414s ago: executing program 4 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x840000000002, 0x3, 0xff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000004800)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.715477344s ago: executing program 4 (id=1010): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00"/29], 0x878) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xffff7fff}}, './file1\x00'}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRES8], 0x2, 0x358, &(0x7f0000000540)="$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") 1.030218096s ago: executing program 2 (id=1011): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)="a6", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000b00)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0xfeff, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x7ffff000) 1.029937786s ago: executing program 4 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r4}, 0x18) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r8) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r9, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x7}]}}]}, 0x38}}, 0x0) 1.026639696s ago: executing program 1 (id=1013): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) iopl(0x3) unshare(0x2c060000) unshare(0x24020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = io_uring_setup(0xfffffffd, &(0x7f0000000000)={0x0, 0x0, 0x800, 0xb}) r8 = io_uring_setup(0x96b, &(0x7f00000003c0)={0x0, 0xf0f1, 0x8, 0x2, 0x0, 0x0, r7}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x18, &(0x7f0000000000), 0x1) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08afccec1dd7b1bcb84b0026bd70190300c77934afa50008000300", @ANYRES32=r6, @ANYBLOB="0800a10008000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0x41, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$eJzs3c1vVFUbAPDnTD8olPdtIUbFhTQxBhKlpQUMMS5gTxr8iBs3VloIUqChNVo0sSS4MTFujDFx5UL8L5TIlpWuXLhxZUiIGpYmjrkzc0tb7rS0THsr9/dLht57zlzOczt9eu6cnnMngMoayv6pReyLiJkUMZAWFuu6o1U51Hzevb8+OpM9UtTrr/+RIrXK8uen1tf+1sF9EfHTjyn2dj3Y7uz81QsT09NTV1r7I3MXZ0Zm568eOn9x4tzUualLYy+NHT929Njx0cMdO9dT1999f+DT8be+/frvNPrdr+MpTsTuVt3S8+iUoRhqfk92LC/Pvq/HO91YSbpa57P0JU7dJQbEuuSvX09EPBUD0RX3X7yB+OTVUoMDNlU9RdSBikryHyoqvw7I39uvfB9cK+WqBNgKd082BwAezP/u5thg9DXGBnbdS7F0WCdFRCdG5rI2bt8av3721vj12KRxOKDYwrWIeLoo/1MjNwcbo/hZ/teW5X92XXC69TUrf22D7Q+t2Jf/sHWa+d+3ofx/e0n+v7PB9uU/AAAAAAAAdM7NkxHxYtHf/2uL83+iYP5Pf0Sc6ED7a//9r3anA80ABe6ejHilcP5vLZ/9O9jV2vpfYz5ATzp7fnrqcET8PyIORs+ObH90lTYOfbb3q3Z1+fy//JG1f7s1F7AVx53uFetnJyfmJh71vIGIu9cinimc/5sW+/9U0P9nvw9mHrKNvc/fON2ubu38BzZL/ZuIA4X9f1p8Tlr9/hwjjeuBkfyq4EHPfvj59+3al/9Qnqz/37V6/g+mpffrmV1/G0fmu+vt6jZ6/d+b3mjccqa3VfbBxNzcldGI3nSqKytdVj62/pjhcZTnQ54vWf4ffG718b+i6/+dEbGw4v9Ofy5fU5x78p/+39rFo/+H8mT5P7mu/n/9G2M3Bn9o1/7D9f9HG339wVaJ8T9o+jJP097l5QXp2F1UtdXxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjoBYRuyPVhhe3a7Xh4Yj+iHgidtWmL8/OvXD28nuXJrO6xuf/1/JP+h1o7qf88/8Hl+yPrdg/EhF7IuKLrp2N/eEzl6cnyz55AAAAAAAAAAAAAAAAAAAA2Cb626z/z/zeVXZ0wKbrLjsAoDQF+f9zGXEAW0//D9Ul/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7Nl/85cUEQsv72w8Mr2tup5SIwM2W63sAIDSuMUPVJepP1Bd3uMDaY36vrYHrXXkambOPMLBAAAAAAAAAAAAAFA5B/ZZ/w9VZf0/VJf1/1Bd+fr//SXHAWw97/GBWGMlf+H6/zWPAgAAAAAAAAAAAAA6aXb+6oWJ6empKzbe3B5hbOVGvV7/OPsp2C7x/Mc38qnw2yWeR9oo9/cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw378BAAD//2QiJqY=") socket$igmp(0x2, 0x3, 0x2) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)=@known='user.syz\x00') 1.025105846s ago: executing program 0 (id=1014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095", @ANYRES32, @ANYRES32, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x798, &(0x7f0000002380)="$eJzs3c1rXFUbAPDnTr7Tvm/ywgvvW90EBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQhYIsIbgQVF4Juuvaj7tz6sdX/wlVL1bRYcSGROx/ttJlJJ21mJprfD27mnHvP5Jxnzv04d+7lTgD71kT6JxNxKCLeTyLGavOTiBiopPojTlTL3d5Yz6VTEpubr/2SVMrc2ljPRcN7Ugdqmf9HxHfvRBzObK23tLq2MFso5Jdr+any4vmp0urakXOLs/P5+fzSsemZmaPHnz1+bPdi/e3HtYPXP3j5qS9P/PH2/66+930SJ+JgbVljHLtlIiZqn8lA+hHe46XdrqzHkl43gIeSbpp91a08DsVY9FVSLYx0s2UAQKe8FRGb23p8uFpy+1IAwN9J4sgOAPtM/XuAWxvrufrUw68juu7GixExXI2/fn2zuqS/ds1uuHIddPRWcs+VkSQixneh/omI+PTrNz5Pp6j1g2tpQDdcuhwRZ8Yntu7/ky33LOzU09st3ByqvEzcN3u/HX+gl75Jxz/PNRv/Ze6Mf6LJ+Geoybb7MB68/Weu7UI1LaXjvxca7m273RB/zXhfLfevyphvIDl7rpBP923/jojJGBhK89OVos1HbpM3/7zZqv7G8d+vH775WVp/+nq3ROZa/9C975mbLc8+atx1Ny5HPNbfLP7kTv8nLca/p9qs45Xn3/2k1bI0/jTe+rQ1/s7avBLxZNP+v9uXybb3J05VVoep+krRxFc/fTzaqv7G/k+ntP76uUA3pP0/un3840nj/Zqlndfxw5Wxb1ste3D8zdf/weT1SnqwNu/ibLm8PB0xmLy6df7Ru++t5+vl0/gnn2i+/Verbb7+p+eEZ9qMv//6z188fPydlcY/t6P+33ni6u2Fvlb1t9f/M5XUZG1OO/u/ps3ZHNrSwEf57AAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOBhJJnsnnclks9WHn/43RjOFYql8+GxxZWkuKr+VPR4DmfqjLscanoc6XXsefj1/9L78MxHxn4j4aGikks/mioW5XgcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHmv/+/2Cv2wUAdNhwrxsAAHSd4z8A7D87O/6PdKwdAED3OP8HgP2n7eP/mc62AwDonp2e/1/uUDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4xzp18mQ6bf6+sZ5L83MXVlcWiheOzOVLC9nFlVw2V1w+n50vFucL+WyuuNjyH12qvhSKxfMzsbRycaqcL5WnSqtrpxeLK0vl0+cWZ+fzp/MDXYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANpXWl1bmC0U8ssS2yZG9kYz9kyiP/ZEMyQ6lmjcS4z0bgcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMf9FQAA//9RLCJ1") r1 = openat$rtc(0xffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000003", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000003c0)="dc", 0x1, 0x40000, 0x0, 0x0) shutdown(r4, 0x1) 965.801092ms ago: executing program 0 (id=1015): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x5605, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) 844.004083ms ago: executing program 1 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095", @ANYBLOB="e3387db4b62e14196ee05a00d9c2a80f82e1aeca21c7101ffed355cc"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESOCT]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x3c, 0x0, 0x8, 0x273691088e6189, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 766.37636ms ago: executing program 4 (id=1017): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r1 = socket$inet6(0xa, 0x3, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x400000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00100000000000120000d1850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001", @ANYRES16=r5, @ANYRESOCT=r5, @ANYRES32=r3], 0xf0}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0xf00}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty, 0x7fff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x10) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 692.562287ms ago: executing program 1 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_io_uring_setup(0xd3f, &(0x7f0000000880), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[], 0x0) 551.9499ms ago: executing program 1 (id=1019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$packet(0x11, 0xa, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x8004) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0xc5) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @dev}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 334.19932ms ago: executing program 4 (id=1020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioperm(0x2, 0x7ff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) fsmount(r1, 0x0, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) recvmsg(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) socket$inet6_dccp(0xa, 0x6, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff5) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 331.95746ms ago: executing program 3 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x5, 0x4f5, &(0x7f0000000740)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f00000002c0)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0x0, 0x5e, &(0x7f0000000280), &(0x7f0000000800)="ffe2000009000000393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4f737c7f91ceaa6790f080b0d2375918c17be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb000000", 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d000000020000000400000002400000850000004edfab4b5d1f351205a2877e6d4115e1ed0f0f3a4f44946b7f85f8df7e0ea0d56424c75c3fdd9d21c0672cb750ea2ac29a4e3bbe554f27394b573ac771d0a79f1defc0e74f0cd30c219f1e8c728c81af1ab0b9c3f9316b80610f1f2ac9aaaeba17e784ff206c6b939f39cde656d90fd510d0af3f31fadf8098d130bbc2df3284", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, r1, 0x0, 0x5) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r4, r5, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x10) 0s ago: executing program 3 (id=1022): r0 = memfd_create(&(0x7f0000000900)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x88\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xf0~\xd9>\x13\xc0\x83E\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}!X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15D\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88\x7f\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xbbF\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98\x1eG\x11:\x85\x80\xc4\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00\xc3k\xc2\xb6\x06+s^\xe3\xbf\x89\xe1\xbd\"\x81\x9f\xd4\xb1\x1b\xf4\n\x87\xf8\xc3(*\xc8\xcd\x13)\xdd$<\xeb\x8c\xa0\x88\xe6MT\x86\xaaA\xcd\x1c\xad\x8fTZ\xa8_\xda\xf9\x8b\x90\x0f\xe1\r\x1b_\"9m\xe2]B\x8exQ\x92w$\x12a\x85\x92\x82_]\xaf\t\xdc\xd8\xa5&\xd4\xd0\x98\x98\xeb\x00\x00i\x00\x00\x00\x00\x00\x00\x00^\xaeLz\xe9\xc6\f\x12\x17C\xe9\x03JmJ\xa5\x9f\x8ea=P\xdb\xa1u\x9d\xa7e\xaed=B\x8b\x8f\x92-\x93~\a\x1d\xb5y\x8b\xea\xa3\xf1\x06\x8c\xda\x01vC\xf8#\x9c\x9a\"%n\xc29\x00\xca>\b\xf1M\xe3\x14\xf7v\xe8\xf8\xc4\x85\xdaz=\x03\xc4d8\x11~\"|\xf1\xaf>\x9b\xabNR\xc5R\xa6\x91\x9d\xc6\xe1\x94\x93\x0e\xed~\x1c\xd9}\xbf\nD\xe9pf}\x15\xae\x11u(\x94x\x00}\x1dS\xb9I\x17m~\x16\x85\xc7\x87#e\x97\x86\x84\"\xa5\xd9\x12\x15\x95\xe4\xbc\x9a\xb6\xdd\x89.f\r\x85h,-\x94?\xc8\xb7h, priority 0 [ 89.080586][ T6166] loop3: detected capacity change from 0 to 128 [ 89.132620][ T6174] loop3: detected capacity change from 0 to 128 [ 89.202525][ T6187] pim6reg1: entered promiscuous mode [ 89.207992][ T6187] pim6reg1: entered allmulticast mode [ 89.326068][ T6109] vhci_hcd: connection closed [ 89.326039][ T6106] vhci_hcd: connection closed [ 89.326185][ T6104] vhci_hcd: connection reset by peer [ 89.331040][ T4168] vhci_hcd: stop threads [ 89.336227][ T6115] vhci_hcd: connection closed [ 89.340814][ T4168] vhci_hcd: release socket [ 89.340831][ T4168] vhci_hcd: disconnect device [ 89.347793][ T6111] vhci_hcd: connection closed [ 89.361697][ T4168] vhci_hcd: stop threads [ 89.370698][ T4168] vhci_hcd: release socket [ 89.375156][ T4168] vhci_hcd: disconnect device [ 89.381613][ T4168] vhci_hcd: stop threads [ 89.385873][ T4168] vhci_hcd: release socket [ 89.390537][ T4168] vhci_hcd: disconnect device [ 89.416289][ T4168] vhci_hcd: stop threads [ 89.420643][ T4168] vhci_hcd: release socket [ 89.425067][ T4168] vhci_hcd: disconnect device [ 89.441229][ T4168] vhci_hcd: stop threads [ 89.445550][ T4168] vhci_hcd: release socket [ 89.450179][ T4168] vhci_hcd: disconnect device [ 89.478103][ T6215] netlink: 9 bytes leftover after parsing attributes in process `syz.3.571'. [ 89.489807][ T6215] gretap0: entered promiscuous mode [ 89.509648][ T6215] netlink: 5 bytes leftover after parsing attributes in process `syz.3.571'. [ 89.524602][ T6215] 0ªX¹¦D: renamed from gretap0 [ 89.533201][ T6215] 0ªX¹¦D: left promiscuous mode [ 89.538232][ T6215] 0ªX¹¦D: entered allmulticast mode [ 89.546517][ T6215] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 89.623611][ T6261] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 89.690902][ T6265] loop3: detected capacity change from 0 to 164 [ 89.711149][ T6265] rock: directory entry would overflow storage [ 89.717492][ T6265] rock: sig=0x4f50, size=4, remaining=3 [ 89.723308][ T6265] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.763266][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 89.805892][ T6275] loop3: detected capacity change from 0 to 128 [ 89.835753][ T6278] loop3: detected capacity change from 0 to 128 [ 89.880978][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.888102][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.897860][ T6280] bridge_slave_1: left allmulticast mode [ 89.903530][ T6280] bridge_slave_1: left promiscuous mode [ 89.909310][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.917025][ T6280] bridge_slave_0: left allmulticast mode [ 89.922681][ T6280] bridge_slave_0: left promiscuous mode [ 89.928440][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.939845][ T6285] SELinux: security_context_str_to_sid () failed with errno=-22 [ 89.996660][ T8] tipc: Node number set to 8432298 [ 90.050209][ T4555] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.072721][ T6288] loop3: detected capacity change from 0 to 128 [ 90.081000][ T4555] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.139570][ T4555] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.155503][ T6300] block device autoloading is deprecated and will be removed. [ 90.168738][ T6300] syz.3.586: attempt to access beyond end of device [ 90.168738][ T6300] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.190866][ T4555] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.279326][ T6290] chnl_net:caif_netlink_parms(): no params data found [ 90.363776][ T4555] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.377405][ T4555] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.389327][ T4555] @ (unregistering): Released all slaves [ 90.397141][ T4555] bond1 (unregistering): Released all slaves [ 90.465141][ T4555] tipc: Disabling bearer [ 90.473076][ T4555] tipc: Left network mode [ 90.652021][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.659151][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.710109][ T6290] bridge_slave_0: entered allmulticast mode [ 90.735306][ T6290] bridge_slave_0: entered promiscuous mode [ 90.765435][ T4555] hsr_slave_0: left promiscuous mode [ 90.771444][ T4555] hsr_slave_1: left promiscuous mode [ 90.780813][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.788267][ T4555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.797129][ T4555] veth1_macvtap: left promiscuous mode [ 90.802748][ T4555] veth0_macvtap: left promiscuous mode [ 90.808372][ T4555] veth1_vlan: left promiscuous mode [ 90.813702][ T4555] veth0_vlan: left promiscuous mode [ 90.900855][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.908062][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.916545][ T6290] bridge_slave_1: entered allmulticast mode [ 90.923106][ T6290] bridge_slave_1: entered promiscuous mode [ 90.945999][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.964843][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.018867][ T6290] team0: Port device team_slave_0 added [ 91.026543][ T6290] team0: Port device team_slave_1 added [ 91.044193][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.051285][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.077696][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.123766][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.130956][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.157157][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.388643][ T6355] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 91.443013][ T6355] bond2: entered promiscuous mode [ 91.452631][ T6355] team0: Port device team_slave_1 removed [ 91.460851][ T6355] bond2: (slave team_slave_1): making interface the new active one [ 91.468796][ T6355] team_slave_1: entered promiscuous mode [ 91.475332][ T6355] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 91.491298][ T6290] hsr_slave_0: entered promiscuous mode [ 91.497464][ T6290] hsr_slave_1: entered promiscuous mode [ 91.505777][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 91.505790][ T29] audit: type=1326 audit(1727515536.500:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.535666][ T29] audit: type=1326 audit(1727515536.500:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.536531][ T6290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.559022][ T29] audit: type=1326 audit(1727515536.500:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.590170][ T29] audit: type=1326 audit(1727515536.500:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.609989][ T6290] Cannot create hsr debugfs directory [ 91.613575][ T29] audit: type=1326 audit(1727515536.500:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.628477][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 91.642249][ T29] audit: type=1326 audit(1727515536.500:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.671533][ T29] audit: type=1326 audit(1727515536.500:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.695104][ T29] audit: type=1326 audit(1727515536.500:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.718566][ T29] audit: type=1326 audit(1727515536.500:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.741964][ T29] audit: type=1326 audit(1727515536.500:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6354 comm="syz.3.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 91.772761][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 91.782840][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 91.816847][ T6369] infiniband syz1: set active [ 91.821707][ T6369] infiniband syz1: added vcan0 [ 91.826856][ T1001] vcan0 speed is unknown, defaulting to 1000 [ 91.872131][ T6369] RDS/IB: syz1: added [ 91.876218][ T6369] smc: adding ib device syz1 with port count 1 [ 91.898352][ T6369] smc: ib device syz1 port 1 has pnetid [ 91.911412][ T3344] vcan0 speed is unknown, defaulting to 1000 [ 91.930356][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 91.956542][ T4555] IPVS: stop unused estimator thread 0... [ 91.991660][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.043542][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.114225][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.165596][ T6290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.185176][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.192443][ T6290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.210531][ T6290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.229873][ T6290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.255321][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.255776][ T6419] Driver unsupported XDP return value 0 on prog (id 500) dev N/A, expect packet loss! [ 92.298272][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 92.302845][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.330284][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.338577][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.357956][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.366073][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.393341][ T6290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.403824][ T6290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.420746][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.427822][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.443417][ T6369] vcan0 speed is unknown, defaulting to 1000 [ 92.498543][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.624517][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 92.679545][ T6290] veth0_vlan: entered promiscuous mode [ 92.691893][ T6290] veth1_vlan: entered promiscuous mode [ 92.732755][ T6290] veth0_macvtap: entered promiscuous mode [ 92.744648][ T6290] veth1_macvtap: entered promiscuous mode [ 92.756294][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.766904][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.776735][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.787247][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.797178][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.807650][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.817485][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.827948][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.850300][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.861563][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.872130][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.881966][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.892526][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.902365][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.913339][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.923219][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.933648][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.945290][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.957673][ T6290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966424][ T6290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.975282][ T6290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.984097][ T6290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.073359][ T6485] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 93.079942][ T6485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.087435][ T6485] vhci_hcd vhci_hcd.0: Device attached [ 93.094793][ T6485] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.103765][ T6485] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 93.110291][ T6485] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.117996][ T6485] vhci_hcd vhci_hcd.0: Device attached [ 93.125733][ T6485] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 93.132393][ T6485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.139866][ T6485] vhci_hcd vhci_hcd.0: Device attached [ 93.159020][ T6485] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 93.165732][ T6485] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.173462][ T6485] vhci_hcd vhci_hcd.0: Device attached [ 93.282916][ T6485] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 93.289552][ T6485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.296940][ T3401] vhci_hcd: vhci_device speed not set [ 93.302334][ T6485] vhci_hcd vhci_hcd.0: Device attached [ 93.356639][ T3401] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 93.371920][ T6090] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.384045][ T6090] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396432][ T6090] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.410375][ T6090] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459630][ T6505] loop0: detected capacity change from 0 to 512 [ 93.481661][ T6505] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.517931][ T6505] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 93.604347][ T6515] syz.0.609 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.621536][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 93.632485][ T6517] loop3: detected capacity change from 0 to 256 [ 93.646434][ T6515] hsr_slave_1 (unregistering): left promiscuous mode [ 93.725952][ T6521] loop3: detected capacity change from 0 to 128 [ 93.826623][ T3327] usb 9-1: enqueue for inactive port 0 [ 93.832179][ T3327] usb 9-1: enqueue for inactive port 0 [ 93.833230][ T6525] vcan0 speed is unknown, defaulting to 1000 [ 93.874104][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.612'. [ 93.904468][ T6498] vhci_hcd: connection closed [ 93.904723][ T4211] vhci_hcd: stop threads [ 93.913748][ T4211] vhci_hcd: release socket [ 93.918237][ T4211] vhci_hcd: disconnect device [ 93.930909][ T6494] vhci_hcd: connection closed [ 93.931004][ T3327] vhci_hcd: vhci_device speed not set [ 93.931226][ C1] ------------[ cut here ]------------ [ 93.946580][ C1] refcount_t: underflow; use-after-free. [ 93.952415][ C1] WARNING: CPU: 1 PID: 23 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 93.956637][ T6489] vhci_hcd: connection closed [ 93.961663][ C1] Modules linked in: [ 93.961677][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 93.967835][ T6486] vhci_hcd: connection reset by peer [ 93.970223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.970237][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 93.970262][ C1] Code: 72 ff ff ff e8 cb 89 71 ff 48 c7 c7 7e d6 b2 86 e8 5f 6f 8a ff c6 05 16 26 f4 04 01 90 48 c7 c7 90 a4 1b 86 e8 7b 45 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 9c 89 71 ff 48 c7 c7 7b d6 b2 86 e8 [ 93.970279][ C1] RSP: 0018:ffffc900000cf9e8 EFLAGS: 00010246 [ 93.970307][ C1] RAX: 721e7a975a2e7a00 RBX: ffff8881048399e4 RCX: ffff888100f92100 [ 93.970318][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.970341][ C1] RBP: 0000000000000003 R08: ffffffff8111f757 R09: 0000000000000000 [ 93.980888][ T6491] vhci_hcd: connection closed [ 93.985821][ C1] R10: 0001ffffffffffff R11: ffff888100f92100 R12: 0000000000000001 [ 93.985840][ C1] R13: ffff888154164400 R14: ffff8881048399e4 R15: 0000000000000000 [ 93.997296][ T4211] vhci_hcd: stop threads [ 94.002029][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 94.021960][ T4211] vhci_hcd: release socket [ 94.027964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.027979][ C1] CR2: 0000000020015000 CR3: 00000001031b2000 CR4: 00000000003506f0 [ 94.027997][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.035947][ T4211] vhci_hcd: disconnect device [ 94.076691][ T4211] vhci_hcd: stop threads [ 94.076791][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.085893][ T4211] vhci_hcd: release socket [ 94.090289][ C1] Call Trace: [ 94.090297][ C1] [ 94.090307][ C1] ? __warn+0x141/0x350 [ 94.096904][ T4211] vhci_hcd: disconnect device [ 94.104929][ C1] ? report_bug+0x315/0x420 [ 94.104956][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 94.104977][ C1] ? handle_bug+0x60/0x90 [ 94.155332][ T4211] vhci_hcd: stop threads [ 94.159273][ C1] ? exc_invalid_op+0x1a/0x50 [ 94.159300][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 94.159332][ C1] ? __warn_printk+0x167/0x1b0 [ 94.163637][ T4211] vhci_hcd: release socket [ 94.163649][ T4211] vhci_hcd: disconnect device [ 94.167862][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 94.167885][ C1] ? refcount_warn_saturate+0x1c5/0x230 [ 94.167918][ C1] sk_skb_reason_drop+0xe9/0x290 [ 94.188592][ T4211] vhci_hcd: stop threads [ 94.191402][ C1] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 94.196958][ T4211] vhci_hcd: release socket [ 94.196969][ T4211] vhci_hcd: disconnect device [ 94.202479][ C1] j1939_tp_recv+0x699/0xa80 [ 94.230557][ C1] j1939_can_recv+0x45f/0x550 [ 94.235256][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 94.240584][ C1] can_rcv_filter+0x225/0x4c0 [ 94.245285][ C1] can_receive+0x182/0x1f0 [ 94.249778][ C1] ? can_rcv+0xdc/0x180 [ 94.253981][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 94.258627][ C1] can_rcv+0xe7/0x180 [ 94.262714][ C1] ? __pfx_can_rcv+0x10/0x10 [ 94.267339][ C1] __netif_receive_skb+0x123/0x280 [ 94.272574][ C1] process_backlog+0x22e/0x440 [ 94.277363][ C1] __napi_poll+0x63/0x3c0 [ 94.281738][ C1] ? net_rx_action+0x376/0x7f0 [ 94.286537][ C1] net_rx_action+0x3a1/0x7f0 [ 94.291173][ C1] handle_softirqs+0xbf/0x280 [ 94.296040][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 94.301242][ C1] run_ksoftirqd+0x1c/0x30 [ 94.305662][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 94.310636][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 94.316106][ C1] kthread+0x1d1/0x210 [ 94.320397][ C1] ? __pfx_kthread+0x10/0x10 [ 94.324990][ C1] ret_from_fork+0x4b/0x60 [ 94.329514][ C1] ? __pfx_kthread+0x10/0x10 [ 94.334137][ C1] ret_from_fork_asm+0x1a/0x30 [ 94.338983][ C1] [ 94.341998][ C1] ---[ end trace 0000000000000000 ]--- [ 94.595870][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 94.635496][ T6529] loop3: detected capacity change from 0 to 1024 [ 94.749415][ T6537] lo speed is unknown, defaulting to 1000 [ 94.755221][ T6537] lo speed is unknown, defaulting to 1000 [ 94.761653][ T6537] lo speed is unknown, defaulting to 1000 [ 94.768277][ T6537] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.777784][ T6537] lo speed is unknown, defaulting to 1000 [ 94.783779][ T6537] lo speed is unknown, defaulting to 1000 [ 94.790159][ T6537] lo speed is unknown, defaulting to 1000 [ 94.796206][ T6537] lo speed is unknown, defaulting to 1000 [ 94.802327][ T6537] lo speed is unknown, defaulting to 1000 [ 94.869831][ T6541] loop3: detected capacity change from 0 to 2048 [ 94.995077][ T6541] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 95.007596][ T6541] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.007596][ T6541] [ 95.017458][ T6541] EXT4-fs (loop3): Total free blocks count 0 [ 95.023539][ T6541] EXT4-fs (loop3): Free/Dirty block details [ 95.029531][ T6541] EXT4-fs (loop3): free_blocks=0 [ 95.034528][ T6541] EXT4-fs (loop3): dirty_blocks=0 [ 95.039654][ T6541] EXT4-fs (loop3): Block reservation details [ 95.045747][ T6541] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 95.120871][ T6551] loop3: detected capacity change from 0 to 512 [ 95.140820][ T6551] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.154516][ T6551] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 95.231426][ T6556] loop3: detected capacity change from 0 to 1024 [ 95.244766][ T6556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.257622][ T6556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 95.267983][ T6556] System zones: 0-1, 3-36 [ 95.353262][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888154164600: rx timeout, send abort [ 95.592734][ T6565] siw: device registration error -23 [ 95.605996][ T6564] loop3: detected capacity change from 0 to 128 [ 95.643377][ T6569] loop3: detected capacity change from 0 to 128 [ 95.730419][ T6576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=6576 comm=syz.4.628 [ 95.747610][ T6576] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 95.754322][ T6576] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.762228][ T6576] vhci_hcd vhci_hcd.0: Device attached [ 95.769991][ T6581] vhci_hcd: connection closed [ 95.770180][ T50] vhci_hcd: stop threads [ 95.779133][ T50] vhci_hcd: release socket [ 95.783747][ T50] vhci_hcd: disconnect device [ 95.785630][ T6584] vcan0 speed is unknown, defaulting to 1000 [ 95.822447][ T6584] lo speed is unknown, defaulting to 1000 [ 95.822815][ T6587] vcan0 speed is unknown, defaulting to 1000 [ 95.859300][ T6587] lo speed is unknown, defaulting to 1000 [ 95.865235][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888154164600: abort rx timeout. Force session deactivation [ 96.312926][ T6592] vcan0 speed is unknown, defaulting to 1000 [ 96.346391][ T6592] lo speed is unknown, defaulting to 1000 [ 96.368541][ T6597] loop4: detected capacity change from 0 to 512 [ 96.375897][ T6597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.384871][ T6597] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 96.490517][ T6604] program syz.2.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.522629][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 96.522719][ T29] audit: type=1400 audit(1727515541.510:3704): avc: denied { listen } for pid=6598 comm="syz.4.634" path=2FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 96.601080][ T6607] loop4: detected capacity change from 0 to 256 [ 96.637890][ T6607] FAT-fs (loop4): bogus sectors per cluster 30 [ 96.644087][ T6607] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.661510][ T6614] siw: device registration error -23 [ 96.677217][ T6617] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 96.692584][ T6617] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 96.702401][ T6617] netlink: 550 bytes leftover after parsing attributes in process `syz.3.640'. [ 96.703029][ T6617] xt_TCPMSS: Only works on TCP SYN packets [ 96.711302][ T29] audit: type=1400 audit(1727515541.700:3705): avc: denied { setopt } for pid=6616 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.750142][ T6611] team0 (unregistering): Port device team_slave_0 removed [ 96.765777][ T6611] team0 (unregistering): Port device team_slave_1 removed [ 96.786752][ T29] audit: type=1400 audit(1727515541.770:3706): avc: denied { nlmsg_write } for pid=6622 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.813638][ T29] audit: type=1400 audit(1727515541.800:3707): avc: denied { write } for pid=6624 comm="syz.1.644" name="001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.039287][ T6633] hub 6-0:1.0: USB hub found [ 97.044051][ T6633] hub 6-0:1.0: 8 ports detected [ 97.374324][ T6640] vcan0 speed is unknown, defaulting to 1000 [ 97.508189][ T29] audit: type=1326 audit(1727515542.400:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 97.531608][ T29] audit: type=1326 audit(1727515542.400:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 97.555264][ T29] audit: type=1326 audit(1727515542.410:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 97.579139][ T29] audit: type=1326 audit(1727515542.410:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 97.602752][ T29] audit: type=1326 audit(1727515542.410:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 97.626742][ T29] audit: type=1326 audit(1727515542.410:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fe6ff46dff9 code=0x7ffc0000 [ 97.637202][ T6640] lo speed is unknown, defaulting to 1000 [ 97.783539][ T6645] ieee802154 phy0 wpan0: encryption failed: -90 [ 97.943517][ T6661] loop4: detected capacity change from 0 to 1024 [ 97.957341][ T6663] loop1: detected capacity change from 0 to 256 [ 97.965012][ T6663] FAT-fs (loop1): bogus sectors per cluster 30 [ 97.971727][ T6663] FAT-fs (loop1): Can't find a valid FAT filesystem [ 98.002255][ T6661] EXT4-fs mount: 12 callbacks suppressed [ 98.002279][ T6661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.029580][ T6661] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 98.064141][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.094124][ T6667] team0 (unregistering): Port device team_slave_0 removed [ 98.127879][ T6674] loop4: detected capacity change from 0 to 128 [ 98.197655][ T6677] loop4: detected capacity change from 0 to 128 [ 98.243725][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.663'. [ 98.384911][ T6692] ieee802154 phy0 wpan0: encryption failed: -90 [ 98.391405][ T3401] usb 3-1: enqueue for inactive port 0 [ 98.397051][ T3401] usb 3-1: enqueue for inactive port 0 [ 98.466897][ T3401] vhci_hcd: vhci_device speed not set [ 98.756947][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.666'. [ 98.842208][ T6714] loop1: detected capacity change from 0 to 128 [ 98.902082][ T6717] team0 (unregistering): Port device team_slave_0 removed [ 98.922718][ T6717] team0 (unregistering): Port device team_slave_1 removed [ 98.950528][ T6720] vcan0 speed is unknown, defaulting to 1000 [ 98.987850][ T6726] loop1: detected capacity change from 0 to 512 [ 99.060216][ T6720] lo speed is unknown, defaulting to 1000 [ 99.071838][ T6726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.111413][ T6729] syzkaller0: entered allmulticast mode [ 99.118008][ T6726] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.170228][ T6726] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.207461][ T6290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.401111][ T6748] loop1: detected capacity change from 0 to 128 [ 99.442992][ T6751] loop4: detected capacity change from 0 to 512 [ 99.458606][ T6751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.463580][ T6744] vcan0 speed is unknown, defaulting to 1000 [ 99.483999][ T6751] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 99.509608][ T6751] EXT4-fs (loop4): 1 truncate cleaned up [ 99.526333][ T6751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.592478][ T6744] lo speed is unknown, defaulting to 1000 [ 99.630864][ T6759] vcan0 speed is unknown, defaulting to 1000 [ 99.781381][ T6759] lo speed is unknown, defaulting to 1000 [ 99.787875][ T6762] vcan0 speed is unknown, defaulting to 1000 [ 99.814366][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.822075][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.827803][ T6765] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 99.886773][ T6768] bridge_slave_1: left allmulticast mode [ 99.892531][ T6768] bridge_slave_1: left promiscuous mode [ 99.898383][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.003264][ T6768] bridge_slave_0: left allmulticast mode [ 100.009063][ T6768] bridge_slave_0: left promiscuous mode [ 100.014841][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.166599][ T6762] lo speed is unknown, defaulting to 1000 [ 100.231160][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.405286][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 100.418467][ T6809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.525730][ T6804] dvmrp0: entered allmulticast mode [ 100.741650][ T6824] loop4: detected capacity change from 0 to 512 [ 100.758804][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.775113][ T6824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.784609][ T6824] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 100.802351][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.852282][ T6824] vcan0 speed is unknown, defaulting to 1000 [ 100.887238][ T6829] loop1: detected capacity change from 0 to 512 [ 100.905234][ T6829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.934280][ T6829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 100.957053][ T6829] System zones: 1-12 [ 100.970162][ T6829] EXT4-fs (loop1): 1 truncate cleaned up [ 100.990780][ T6829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.015687][ T6824] lo speed is unknown, defaulting to 1000 [ 101.025565][ T6828] vcan0 speed is unknown, defaulting to 1000 [ 101.087502][ T6829] loop1: detected capacity change from 512 to 64 [ 101.105499][ T6842] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 101.128465][ T6842] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 101.138564][ T6842] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 101.173409][ T6828] lo speed is unknown, defaulting to 1000 [ 101.268084][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.313845][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.327648][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.356317][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.373120][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.394717][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.412927][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.430092][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.444062][ T6290] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 101.738101][ T6290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.811197][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 101.811211][ T29] audit: type=1400 audit(1727515546.800:4016): avc: denied { connect } for pid=6861 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.837359][ T29] audit: type=1400 audit(1727515546.800:4017): avc: denied { name_connect } for pid=6861 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 101.891257][ T4168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.910190][ T29] audit: type=1400 audit(1727515546.840:4018): avc: denied { execmem } for pid=6859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.978263][ T4168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.992641][ T29] audit: type=1400 audit(1727515546.930:4019): avc: denied { mounton } for pid=6867 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.016290][ T29] audit: type=1400 audit(1727515546.940:4020): avc: denied { sys_module } for pid=6867 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.109072][ T29] audit: type=1400 audit(1727515547.100:4021): avc: denied { setopt } for pid=6861 comm="syz.4.713" laddr=172.20.20.170 lport=45215 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.134833][ T4168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.201675][ T4168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.214747][ T29] audit: type=1400 audit(1727515547.190:4022): avc: denied { create } for pid=6880 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.216492][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 102.236260][ T29] audit: type=1400 audit(1727515547.200:4023): avc: denied { write } for pid=6880 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.265659][ T29] audit: type=1400 audit(1727515547.200:4024): avc: denied { read } for pid=6880 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.287371][ T29] audit: type=1400 audit(1727515547.200:4025): avc: denied { create } for pid=6880 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.321770][ T6867] vcan0 speed is unknown, defaulting to 1000 [ 102.358013][ T4168] bridge_slave_1: left allmulticast mode [ 102.363980][ T4168] bridge_slave_1: left promiscuous mode [ 102.369820][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.393218][ T4168] bridge_slave_0: left allmulticast mode [ 102.399257][ T4168] bridge_slave_0: left promiscuous mode [ 102.405045][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.519419][ T4168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.531234][ T4168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.542207][ T4168] bond0 (unregistering): Released all slaves [ 102.564721][ T6881] dvmrp0: entered allmulticast mode [ 102.570237][ T6867] lo speed is unknown, defaulting to 1000 [ 102.643146][ T6893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.677615][ T4168] hsr_slave_0: left promiscuous mode [ 102.720889][ T4168] hsr_slave_1: left promiscuous mode [ 102.734023][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.741489][ T4168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.777900][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.785422][ T4168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.806610][ T4168] veth1_macvtap: left promiscuous mode [ 102.812229][ T4168] veth0_macvtap: left promiscuous mode [ 102.817771][ T4168] veth1_vlan: left promiscuous mode [ 102.823002][ T4168] veth0_vlan: left promiscuous mode [ 102.948988][ T4168] team0 (unregistering): Port device team_slave_1 removed [ 102.959743][ T4168] team0 (unregistering): Port device team_slave_0 removed [ 103.004644][ T6904] bridge0: port 3(team0) entered disabled state [ 103.011041][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.018223][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.174227][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 103.321082][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.328427][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.345860][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 103.355093][ T6867] bridge_slave_0: entered allmulticast mode [ 103.363934][ T6867] bridge_slave_0: entered promiscuous mode [ 103.370753][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.377877][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.385182][ T6867] bridge_slave_1: entered allmulticast mode [ 103.393909][ T6867] bridge_slave_1: entered promiscuous mode [ 103.410461][ T6948] loop4: detected capacity change from 0 to 256 [ 103.452543][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.468736][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.510096][ T6867] team0: Port device team_slave_0 added [ 103.523904][ T6867] team0: Port device team_slave_1 added [ 103.581891][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.588985][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.615066][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.631849][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.640630][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.691565][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.698792][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.724876][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.774016][ T6867] hsr_slave_0: entered promiscuous mode [ 103.781366][ T6867] hsr_slave_1: entered promiscuous mode [ 103.788116][ T6867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.795831][ T6867] Cannot create hsr debugfs directory [ 103.864128][ T6980] loop4: detected capacity change from 0 to 512 [ 103.980463][ T6980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.993435][ T6980] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.056341][ T6980] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.733: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 104.073498][ T6980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 104.082605][ T6980] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.733: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 104.107069][ T6980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 104.116343][ T6980] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.733: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 104.134375][ T6980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 104.144188][ T6980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.733: bg 0: block 18: invalid block bitmap [ 104.157754][ T6980] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.733: Failed to acquire dquot type 1 [ 104.386362][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.396489][ T7009] bridge_slave_1: left allmulticast mode [ 104.402323][ T7009] bridge_slave_1: left promiscuous mode [ 104.408110][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.602216][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.871162][ T7020] loop4: detected capacity change from 0 to 512 [ 104.932537][ T7030] vcan0 speed is unknown, defaulting to 1000 [ 104.963326][ T7030] lo speed is unknown, defaulting to 1000 [ 105.001260][ T7038] vcan0 speed is unknown, defaulting to 1000 [ 105.041097][ T7038] lo speed is unknown, defaulting to 1000 [ 105.256933][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.384813][ T7020] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.445803][ T7020] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.472828][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.607280][ T6867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.632291][ T6867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.648832][ T6867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.668766][ T6867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.711919][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.725940][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.735422][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.742627][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.765637][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.772940][ T4260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.793017][ T6867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.803543][ T6867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.873787][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.968795][ T6867] veth0_vlan: entered promiscuous mode [ 105.977618][ T6867] veth1_vlan: entered promiscuous mode [ 105.994781][ T6867] veth0_macvtap: entered promiscuous mode [ 106.002827][ T6867] veth1_macvtap: entered promiscuous mode [ 106.014141][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.024674][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.034551][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.045102][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.054961][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.065402][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.075380][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.085817][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.096662][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.104766][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.115286][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.125264][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.135759][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.145763][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.156243][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.166093][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.176570][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.188179][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.199683][ T6867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.208463][ T6867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.217321][ T6867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.226032][ T6867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.412598][ T7143] vcan0 speed is unknown, defaulting to 1000 [ 106.448773][ T7143] lo speed is unknown, defaulting to 1000 [ 106.456230][ T7161] vcan0 speed is unknown, defaulting to 1000 [ 106.538572][ T7161] lo speed is unknown, defaulting to 1000 [ 106.611858][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.651629][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.772844][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.780193][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.819413][ T7180] vcan0 speed is unknown, defaulting to 1000 [ 106.834299][ T7181] bridge_slave_1: left allmulticast mode [ 106.840045][ T7181] bridge_slave_1: left promiscuous mode [ 106.845706][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.902032][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 106.902127][ T29] audit: type=1400 audit(1727515551.890:4248): avc: denied { create } for pid=7178 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.937422][ T29] audit: type=1400 audit(1727515551.890:4249): avc: denied { write } for pid=7178 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.968955][ T7181] bridge_slave_0: left allmulticast mode [ 106.974721][ T7181] bridge_slave_0: left promiscuous mode [ 106.980474][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.006505][ T29] audit: type=1400 audit(1727515551.990:4250): avc: denied { ioctl } for pid=7178 comm="syz.1.751" path="socket:[16101]" dev="sockfs" ino=16101 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.033898][ T29] audit: type=1400 audit(1727515552.020:4251): avc: denied { write } for pid=7178 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.071942][ T29] audit: type=1400 audit(1727515552.040:4252): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 107.094006][ T29] audit: type=1400 audit(1727515552.040:4253): avc: denied { search } for pid=2949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.115729][ T29] audit: type=1400 audit(1727515552.040:4254): avc: denied { open } for pid=2949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.138335][ T29] audit: type=1400 audit(1727515552.040:4255): avc: denied { getattr } for pid=2949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.183805][ T7180] lo speed is unknown, defaulting to 1000 [ 107.465292][ T29] audit: type=1400 audit(1727515552.420:4256): avc: denied { read } for pid=7183 comm="syz.4.752" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.486543][ T29] audit: type=1400 audit(1727515552.420:4257): avc: denied { open } for pid=7183 comm="syz.4.752" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.970539][ T7206] vcan0 speed is unknown, defaulting to 1000 [ 108.005855][ T7206] lo speed is unknown, defaulting to 1000 [ 108.025797][ T7210] vcan0 speed is unknown, defaulting to 1000 [ 108.051250][ T7210] lo speed is unknown, defaulting to 1000 [ 109.165360][ T7254] loop4: detected capacity change from 0 to 4096 [ 109.220525][ T7254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.360027][ T7264] loop1: detected capacity change from 0 to 512 [ 109.382905][ T7264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.416053][ T7264] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.777: bg 0: block 248: padding at end of block bitmap is not set [ 109.453004][ T7264] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.777: Failed to acquire dquot type 1 [ 109.481059][ T7264] EXT4-fs (loop1): 1 truncate cleaned up [ 109.495893][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.517075][ T7264] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.601626][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.697061][ T7272] loop1: detected capacity change from 0 to 512 [ 109.763605][ T7272] ext4: Unknown parameter 'func' [ 109.962593][ T7285] sctp: [Deprecated]: syz.0.780 (pid 7285) Use of int in maxseg socket option. [ 109.962593][ T7285] Use struct sctp_assoc_value instead [ 110.039490][ T7287] syz.3.781[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.039602][ T7287] syz.3.781[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.053429][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.100974][ T7287] syz.3.781[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.181437][ T7281] xt_TCPMSS: Only works on TCP SYN packets [ 110.289095][ T7293] vcan0 speed is unknown, defaulting to 1000 [ 110.380753][ T7293] lo speed is unknown, defaulting to 1000 [ 110.514388][ T7310] veth0_vlan: entered allmulticast mode [ 110.608745][ T7315] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 110.800616][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 110.827343][ T7323] team0: left allmulticast mode [ 110.832267][ T7323] team_slave_0: left allmulticast mode [ 110.837743][ T7323] team_slave_1: left allmulticast mode [ 110.843428][ T7323] bridge0: port 3(team0) entered disabled state [ 110.882093][ T7323] bridge_slave_1: left allmulticast mode [ 110.887922][ T7323] bridge_slave_1: left promiscuous mode [ 110.893603][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.918084][ T7323] bridge_slave_0: left allmulticast mode [ 110.923873][ T7323] bridge_slave_0: left promiscuous mode [ 110.929598][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.035046][ T7337] syz.4.797[7337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.035148][ T7337] syz.4.797[7337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.040733][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 111.058534][ T7337] syz.4.797[7337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.083065][ T7339] loop1: detected capacity change from 0 to 512 [ 111.120882][ T7339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.133811][ T7339] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.208505][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.233533][ T7353] loop4: detected capacity change from 0 to 128 [ 111.247073][ T7356] loop1: detected capacity change from 0 to 1024 [ 111.261121][ T7356] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.272173][ T7356] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.283130][ T7356] JBD2: no valid journal superblock found [ 111.288944][ T7356] EXT4-fs (loop1): Could not load journal inode [ 111.557473][ T7359] vcan0 speed is unknown, defaulting to 1000 [ 111.606431][ T7359] lo speed is unknown, defaulting to 1000 [ 112.006951][ T7365] loop4: detected capacity change from 0 to 512 [ 112.010029][ T7366] can0: slcan on ttyS3. [ 112.013728][ T7365] ext4: Unknown parameter 'func' [ 112.021208][ T7362] vcan0 speed is unknown, defaulting to 1000 [ 112.028992][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 112.029004][ T29] audit: type=1400 audit(1727515557.030:4357): avc: denied { read } for pid=3005 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 112.169253][ T29] audit: type=1400 audit(1727515557.050:4358): avc: denied { search } for pid=3005 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.190637][ T29] audit: type=1400 audit(1727515557.050:4359): avc: denied { read } for pid=3005 comm="dhcpcd" name="n61" dev="tmpfs" ino=5438 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.212353][ T29] audit: type=1400 audit(1727515557.050:4360): avc: denied { open } for pid=3005 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=5438 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.235393][ T29] audit: type=1400 audit(1727515557.050:4361): avc: denied { getattr } for pid=3005 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=5438 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.258690][ T29] audit: type=1400 audit(1727515557.130:4362): avc: denied { ioctl } for pid=7364 comm="syz.2.815" path="socket:[18447]" dev="sockfs" ino=18447 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.317318][ T7362] lo speed is unknown, defaulting to 1000 [ 112.432363][ T7366] can0 (unregistered): slcan off ttyS3. [ 112.438037][ T7366] Falling back ldisc for ttyS3. [ 112.846586][ T29] audit: type=1400 audit(1727515557.160:4363): avc: denied { read } for pid=7372 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.869602][ T29] audit: type=1400 audit(1727515557.160:4364): avc: denied { open } for pid=7372 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.894628][ T29] audit: type=1400 audit(1727515557.160:4365): avc: denied { getattr } for pid=7372 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.084394][ T7393] sctp: [Deprecated]: syz.2.806 (pid 7393) Use of int in maxseg socket option. [ 113.084394][ T7393] Use struct sctp_assoc_value instead [ 113.110220][ T29] audit: type=1400 audit(1727515558.010:4366): avc: denied { write } for pid=7371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.110360][ T7392] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 113.192842][ T7393] xt_TCPMSS: Only works on TCP SYN packets [ 113.223383][ T7407] bond1: entered promiscuous mode [ 113.228539][ T7407] bond1: entered allmulticast mode [ 113.236663][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.252339][ T7407] bond1 (unregistering): Released all slaves [ 113.284420][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 113.293772][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.810'. [ 113.303061][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 113.317079][ T7416] loop4: detected capacity change from 0 to 164 [ 113.593250][ T7435] rock: directory entry would overflow storage [ 113.599581][ T7435] rock: sig=0x4f50, size=4, remaining=3 [ 113.605157][ T7435] isofs: Unable to find the ".." directory for NFS. [ 113.904100][ T7442] can0: slcan on ttyS3. [ 114.026832][ T7442] can0 (unregistered): slcan off ttyS3. [ 114.036483][ T7442] Falling back ldisc for ttyS3. [ 114.181981][ T7447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7447 comm=syz.1.818 [ 114.228529][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.240231][ T7449] IPv6: Can't replace route, no match found [ 114.246381][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.256433][ T7451] loop1: detected capacity change from 0 to 128 [ 114.313202][ T7458] loop1: detected capacity change from 0 to 1024 [ 114.343196][ T7463] vcan0 speed is unknown, defaulting to 1000 [ 114.348162][ T7458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.377969][ T7463] lo speed is unknown, defaulting to 1000 [ 114.427973][ T7458] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 114.433524][ T7463] devpts: called with bogus options [ 114.448277][ T4171] tipc: Subscription rejected, illegal request [ 114.464765][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.812108][ T7473] bond2: entered promiscuous mode [ 114.817330][ T7473] bond2: entered allmulticast mode [ 114.829800][ T7473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.841269][ T7473] bond2 (unregistering): Released all slaves [ 114.843861][ T7478] loop1: detected capacity change from 0 to 2048 [ 114.856533][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 114.870683][ T7478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.930137][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 115.014344][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.017195][ T7491] IPv6: Can't replace route, no match found [ 115.032364][ T7493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7493 comm=syz.2.835 [ 115.059697][ T7495] loop1: detected capacity change from 0 to 164 [ 115.192720][ T7504] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 115.834434][ T7511] loop4: detected capacity change from 0 to 1024 [ 115.887540][ T7499] rock: directory entry would overflow storage [ 115.890676][ T7511] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.893696][ T7499] rock: sig=0x4f50, size=4, remaining=3 [ 115.907975][ T7499] isofs: Unable to find the ".." directory for NFS. [ 115.908008][ T7511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.171319][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.213729][ T7518] vcan0 speed is unknown, defaulting to 1000 [ 116.249381][ T7518] lo speed is unknown, defaulting to 1000 [ 116.300486][ T7525] loop4: detected capacity change from 0 to 512 [ 116.531256][ T7525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.556474][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 116.581126][ T7525] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.701321][ T7525] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 116.759778][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.788000][ T7539] syz.3.850[7539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.789307][ T7539] syz.3.850[7539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.804061][ T7539] syz.3.850[7539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.815665][ T7542] IPv6: Can't replace route, no match found [ 116.922990][ T7552] loop1: detected capacity change from 0 to 128 [ 116.990049][ T7559] loop4: detected capacity change from 0 to 512 [ 117.029262][ T7559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.043214][ T7559] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.051501][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 117.051514][ T29] audit: type=1400 audit(1727515562.040:4584): avc: denied { bind } for pid=7556 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.080234][ T29] audit: type=1400 audit(1727515562.040:4585): avc: denied { setopt } for pid=7556 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.102287][ T29] audit: type=1326 audit(1727515562.100:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf94e1dff9 code=0x7ffc0000 [ 117.129815][ T29] audit: type=1326 audit(1727515562.100:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf94e1dff9 code=0x7ffc0000 [ 117.154490][ T7559] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 117.172790][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.276398][ T7575] loop4: detected capacity change from 0 to 2048 [ 117.287940][ T7575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.386239][ T6130] udevd[6130]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 117.595086][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.743046][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 121.092535][ T7590] loop1: detected capacity change from 0 to 128 [ 121.214613][ T29] audit: type=1400 audit(1727515566.200:4588): avc: denied { mounton } for pid=7597 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 121.317195][ T7601] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 121.325030][ T7601] FAT-fs (loop1): Filesystem has been set read-only [ 121.463104][ T7597] vcan0 speed is unknown, defaulting to 1000 [ 121.491098][ T4341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.528703][ T7597] lo speed is unknown, defaulting to 1000 [ 121.551466][ T4341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.598390][ T4341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.610731][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 121.629093][ T4341] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.653121][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.660226][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.667643][ T7597] bridge_slave_0: entered allmulticast mode [ 121.673931][ T7597] bridge_slave_0: entered promiscuous mode [ 121.681112][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.688256][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.695502][ T7597] bridge_slave_1: entered allmulticast mode [ 121.701907][ T7597] bridge_slave_1: entered promiscuous mode [ 121.718691][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.729137][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.754547][ T7597] team0: Port device team_slave_0 added [ 121.761371][ T7597] team0: Port device team_slave_1 added [ 121.829343][ T4341] dvmrp0 (unregistering): left allmulticast mode [ 121.841717][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.851872][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.862032][ T4341] bond0 (unregistering): Released all slaves [ 121.869725][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.876690][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.902726][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.919929][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.926962][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.952994][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.981447][ T7597] hsr_slave_0: entered promiscuous mode [ 121.990457][ T7597] hsr_slave_1: entered promiscuous mode [ 121.996868][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.004416][ T7597] Cannot create hsr debugfs directory [ 122.042600][ T4341] hsr_slave_0: left promiscuous mode [ 122.049529][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.057044][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.064878][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.072305][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.083208][ T4341] veth1_macvtap: left promiscuous mode [ 122.088831][ T4341] veth0_macvtap: left promiscuous mode [ 122.476331][ T4341] IPVS: stop unused estimator thread 0... [ 122.514689][ T7597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.523747][ T7597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.533451][ T7597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.542283][ T7597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.581305][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.594571][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.603907][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.611130][ T4165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.621960][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.629214][ T4165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.694755][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.769644][ T7597] veth0_vlan: entered promiscuous mode [ 122.778508][ T7597] veth1_vlan: entered promiscuous mode [ 122.794850][ T7597] veth0_macvtap: entered promiscuous mode [ 122.802848][ T7597] veth1_macvtap: entered promiscuous mode [ 122.814101][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.824584][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.834460][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.844894][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.854718][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.865193][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.875052][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.885517][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.897351][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.908639][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.919160][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.929025][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.939694][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.949550][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.960004][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.969832][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.980324][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.994272][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.004534][ T7597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.013284][ T7597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.022019][ T7597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.030727][ T7597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.049529][ T29] audit: type=1400 audit(1727515568.040:4589): avc: denied { mounton } for pid=7597 comm="syz-executor" path="/root/syzkaller.QdzUg4/syz-tmp" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 123.074010][ T29] audit: type=1400 audit(1727515568.040:4590): avc: denied { mount } for pid=7597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.096616][ T29] audit: type=1400 audit(1727515568.040:4591): avc: denied { mounton } for pid=7597 comm="syz-executor" path="/root/syzkaller.QdzUg4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 123.123418][ T29] audit: type=1400 audit(1727515568.040:4592): avc: denied { mounton } for pid=7597 comm="syz-executor" path="/root/syzkaller.QdzUg4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 123.151769][ T29] audit: type=1400 audit(1727515568.090:4593): avc: denied { mounton } for pid=7597 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 123.163484][ T7749] syz.0.864[7749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.174917][ T7749] syz.0.864[7749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.186492][ T7749] syz.0.864[7749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.212959][ T7756] loop4: detected capacity change from 0 to 512 [ 123.218388][ T29] audit: type=1400 audit(1727515568.210:4594): avc: denied { bind } for pid=7752 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.233179][ T7756] ext3: Unknown parameter 'fowner' [ 123.249672][ T29] audit: type=1400 audit(1727515568.210:4595): avc: denied { name_bind } for pid=7752 comm="syz.2.881" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.249699][ T29] audit: type=1400 audit(1727515568.210:4596): avc: denied { node_bind } for pid=7752 comm="syz.2.881" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 123.317024][ T29] audit: type=1400 audit(1727515568.300:4597): avc: denied { name_bind } for pid=7752 comm="syz.2.881" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.360150][ T7761] IPv6: Can't replace route, no match found [ 123.413018][ T7766] loop1: detected capacity change from 0 to 128 [ 123.504841][ T29] audit: type=1400 audit(1727515568.490:4598): avc: denied { mounton } for pid=7755 comm="syz.4.882" path="/proc/364/cgroup" dev="proc" ino=18076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 123.835123][ T7782] vcan0 speed is unknown, defaulting to 1000 [ 123.881961][ T7782] lo speed is unknown, defaulting to 1000 [ 124.561025][ T7799] syz.1.886[7799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.561085][ T7799] syz.1.886[7799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.588715][ T7799] syz.1.886[7799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.638353][ T7802] IPv6: Can't replace route, no match found [ 124.748879][ T7807] loop1: detected capacity change from 0 to 128 [ 125.377525][ T7813] loop4: detected capacity change from 0 to 512 [ 125.411821][ T7813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.432097][ T7813] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.480591][ T7824] loop1: detected capacity change from 0 to 128 [ 125.791024][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'. [ 126.389234][ T7834] loop1: detected capacity change from 0 to 128 [ 126.642415][ T7813] syz.4.892 (7813) used greatest stack depth: 6200 bytes left [ 126.651994][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.672722][ T7843] syz.1.900[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.672832][ T7843] syz.1.900[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.686418][ T7841] IPv6: Can't replace route, no match found [ 126.695857][ T7843] syz.1.900[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.773382][ T7850] mmap: syz.4.903 (7850): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 126.993499][ T7861] random: crng reseeded on system resumption [ 127.399441][ T7865] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 127.441948][ T7871] vcan0 speed is unknown, defaulting to 1000 [ 127.472881][ T7871] lo speed is unknown, defaulting to 1000 [ 127.932411][ T7885] loop4: detected capacity change from 0 to 2048 [ 127.965463][ T7885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.030615][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.390568][ T7893] IPv6: Can't replace route, no match found [ 128.619980][ T7856] loop1: detected capacity change from 0 to 512 [ 128.626831][ T7856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.635116][ T7856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.642055][ T7856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.904: bg 0: block 248: padding at end of block bitmap is not set [ 128.656463][ T7856] __quota_error: 141 callbacks suppressed [ 128.656490][ T7856] Quota error (device loop1): write_blk: dquota write failed [ 128.669704][ T7856] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 128.679623][ T7856] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.904: Failed to acquire dquot type 1 [ 128.691431][ T7856] EXT4-fs (loop1): 1 truncate cleaned up [ 128.697642][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.806736][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.141425][ T7897] loop4: detected capacity change from 0 to 512 [ 129.149986][ T7897] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.916: bg 0: block 131: padding at end of block bitmap is not set [ 129.176630][ T7897] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 129.192005][ T7897] EXT4-fs (loop4): 1 truncate cleaned up [ 129.198992][ T29] audit: type=1326 audit(1727515574.190:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.222736][ T7897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.236080][ T29] audit: type=1326 audit(1727515574.210:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.259630][ T29] audit: type=1326 audit(1727515574.210:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.283080][ T29] audit: type=1326 audit(1727515574.210:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.306390][ T29] audit: type=1326 audit(1727515574.210:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.329762][ T29] audit: type=1326 audit(1727515574.230:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.353140][ T29] audit: type=1326 audit(1727515574.230:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f243600e5 code=0x7ffc0000 [ 129.376465][ T29] audit: type=1326 audit(1727515574.230:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2432dff9 code=0x7ffc0000 [ 129.402347][ T7912] loop1: detected capacity change from 0 to 256 [ 129.415663][ T7912] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.471159][ T7897] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 129.497944][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.584605][ T7917] block device autoloading is deprecated and will be removed. [ 129.608843][ T7917] syz.2.919: attempt to access beyond end of device [ 129.608843][ T7917] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.704505][ T7928] loop0: detected capacity change from 0 to 128 [ 129.829534][ T7932] 9pnet_fd: Insufficient options for proto=fd [ 129.873302][ T7932] loop0: detected capacity change from 0 to 2048 [ 129.883444][ T7930] vcan0 speed is unknown, defaulting to 1000 [ 129.911110][ T7932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.000304][ T7597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.090857][ T7930] lo speed is unknown, defaulting to 1000 [ 130.767527][ T7988] loop4: detected capacity change from 0 to 1024 [ 130.788377][ T7988] EXT4-fs: Mount option(s) incompatible with ext2 [ 130.797135][ T7990] loop1: detected capacity change from 0 to 4096 [ 130.837732][ T7990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.232213][ T8056] vcan0 speed is unknown, defaulting to 1000 [ 131.264516][ T8056] lo speed is unknown, defaulting to 1000 [ 131.323025][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 131.372910][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.380169][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.387460][ T8056] bridge_slave_0: entered allmulticast mode [ 131.393814][ T8056] bridge_slave_0: entered promiscuous mode [ 131.401225][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.408386][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.415567][ T8056] bridge_slave_1: entered allmulticast mode [ 131.422763][ T8056] bridge_slave_1: entered promiscuous mode [ 131.440925][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.451299][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.479471][ T8056] team0: Port device team_slave_0 added [ 131.489131][ T8056] team0: Port device team_slave_1 added [ 131.517335][ T8114] netlink: 'syz.2.935': attribute type 4 has an invalid length. [ 131.531048][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.538021][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.564078][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.603809][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.610795][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.636833][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.650172][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.689295][ T8127] loop1: detected capacity change from 0 to 512 [ 131.699379][ T8127] EXT4-fs: Ignoring removed i_version option [ 131.713833][ T8056] hsr_slave_0: entered promiscuous mode [ 131.717388][ T8124] loop4: detected capacity change from 0 to 2048 [ 131.720518][ T8127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.727954][ T8056] hsr_slave_1: entered promiscuous mode [ 131.741627][ T8129] macvlan0: entered allmulticast mode [ 131.747113][ T8129] veth1_vlan: entered allmulticast mode [ 131.747635][ T8127] EXT4-fs (loop1): 1 truncate cleaned up [ 131.758828][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.759706][ T8129] pim6reg: entered allmulticast mode [ 131.845447][ T8056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.908539][ T8056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.958227][ T8056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.999373][ T8056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.066004][ T8056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.075080][ T8056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.096516][ T8056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.110808][ T8056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.131506][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.138599][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.145906][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.153137][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.188511][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.197704][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.256233][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.269547][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.282059][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.289138][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.293910][ T8141] siw: device registration error -23 [ 132.305306][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.312383][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.369245][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.410358][ T8056] veth0_vlan: entered promiscuous mode [ 132.418954][ T8056] veth1_vlan: entered promiscuous mode [ 132.437682][ T8056] veth0_macvtap: entered promiscuous mode [ 132.446987][ T8056] veth1_macvtap: entered promiscuous mode [ 132.457823][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.468296][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.478136][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.488573][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.498404][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.508983][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.518822][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.529497][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.539384][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.550175][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.562072][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.576031][ T8141] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.657500][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.668099][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.678014][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.688445][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.698351][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.708831][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.718696][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.729129][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.739062][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.749565][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.530011][ T6867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.569489][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.616232][ T8056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.625033][ T8056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.633794][ T8056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.639645][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 133.642596][ T8056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.674884][ T29] kauditd_printk_skb: 980 callbacks suppressed [ 133.674898][ T29] audit: type=1400 audit(1727515578.660:5728): avc: denied { mount } for pid=8158 comm="syz.2.945" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.748802][ T29] audit: type=1400 audit(1727515578.670:5729): avc: denied { mounton } for pid=8056 comm="syz-executor" path="/root/syzkaller.F6aYIq/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 133.773280][ T29] audit: type=1400 audit(1727515578.670:5730): avc: denied { mount } for pid=8056 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.795378][ T29] audit: type=1400 audit(1727515578.670:5731): avc: denied { mount } for pid=8056 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.817339][ T29] audit: type=1400 audit(1727515578.670:5732): avc: denied { mounton } for pid=8056 comm="syz-executor" path="/root/syzkaller.F6aYIq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 133.844128][ T29] audit: type=1400 audit(1727515578.670:5733): avc: denied { mounton } for pid=8056 comm="syz-executor" path="/root/syzkaller.F6aYIq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 133.871723][ T29] audit: type=1400 audit(1727515578.680:5734): avc: denied { create } for pid=8160 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.891320][ T29] audit: type=1400 audit(1727515578.690:5735): avc: denied { write } for pid=8160 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.910549][ T29] audit: type=1400 audit(1727515578.690:5736): avc: denied { connect } for pid=8160 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 133.930066][ T29] audit: type=1400 audit(1727515578.690:5737): avc: denied { name_connect } for pid=8160 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 133.935315][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'. [ 133.994760][ T8175] netlink: 'syz.4.948': attribute type 10 has an invalid length. [ 134.372903][ T8185] loop3: detected capacity change from 0 to 1024 [ 134.385008][ T8185] EXT4-fs: Ignoring removed orlov option [ 134.390713][ T8185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.435056][ T8185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 134.443301][ T8185] System zones: 0-1, 3-36 [ 134.466062][ T8185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.613591][ T8200] loop1: detected capacity change from 0 to 256 [ 134.826266][ T8209] loop4: detected capacity change from 0 to 512 [ 134.895880][ T8209] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.973201][ T8209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 134.988858][ T8209] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.031605][ T8209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.955: bg 0: block 361: padding at end of block bitmap is not set [ 135.129956][ T8209] EXT4-fs (loop4): Remounting filesystem read-only [ 135.148599][ T8209] EXT4-fs (loop4): 1 truncate cleaned up [ 135.154835][ T8209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 135.194243][ T8209] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 135.226421][ T8209] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 135.293561][ T8224] €: renamed from bond0 (while UP) [ 135.299396][ T8206] sctp: [Deprecated]: syz.4.955 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.299396][ T8206] Use struct sctp_sack_info instead [ 135.328792][ T8056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.358560][ T8228] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 135.374932][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.384911][ T8228] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 135.549532][ T8238] loop0: detected capacity change from 0 to 128 [ 135.580496][ T8245] loop0: detected capacity change from 0 to 512 [ 135.601707][ T8245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.606960][ T8243] netlink: 116 bytes leftover after parsing attributes in process `syz.1.963'. [ 135.611320][ T8230] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 135.628156][ T8230] unsupported nla_type 65024 [ 135.633511][ T8251] loop4: detected capacity change from 0 to 512 [ 135.655933][ T8251] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 135.657101][ T8245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.678719][ T8251] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.681649][ T8245] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.709983][ T8251] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.966: Failed to acquire dquot type 1 [ 135.724705][ T8251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.966: bg 0: block 40: padding at end of block bitmap is not set [ 135.740658][ T8251] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 135.750176][ T8251] EXT4-fs (loop4): 1 truncate cleaned up [ 135.756460][ T8251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.774097][ T8251] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 135.782468][ T7597] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 135.798894][ T7597] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 135.808799][ T7597] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 135.822663][ T7597] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 135.831788][ T7597] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 135.845532][ T7597] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 135.855472][ T7597] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2976: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 135.870229][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.872707][ T7597] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 135.889052][ T7597] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor: bit already cleared for inode 16 [ 135.900566][ T7597] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 135.925766][ T7597] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 135.969092][ T8270] vcan0 speed is unknown, defaulting to 1000 [ 135.998795][ T8270] lo speed is unknown, defaulting to 1000 [ 136.073670][ T8277] loop4: detected capacity change from 0 to 1024 [ 136.098170][ T8277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.117757][ T7597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.153122][ T8280] vcan0 speed is unknown, defaulting to 1000 [ 136.298754][ T8280] lo speed is unknown, defaulting to 1000 [ 136.305695][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.387613][ T8285] vcan0 speed is unknown, defaulting to 1000 [ 136.423500][ T8301] loop3: detected capacity change from 0 to 128 [ 136.437010][ T8285] lo speed is unknown, defaulting to 1000 [ 136.451753][ T8296] netlink: 9 bytes leftover after parsing attributes in process `syz.4.974'. [ 136.462639][ T8296] gretap0: entered promiscuous mode [ 136.475811][ T8296] netlink: 5 bytes leftover after parsing attributes in process `syz.4.974'. [ 136.486155][ T8296] 0ªX¹¦D: renamed from gretap0 [ 136.492895][ T8296] 0ªX¹¦D: left promiscuous mode [ 136.497862][ T8296] 0ªX¹¦D: entered allmulticast mode [ 136.506133][ T8296] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 136.560655][ T8307] loop3: detected capacity change from 0 to 128 [ 136.585276][ T8308] tipc: Started in network mode [ 136.590228][ T8308] tipc: Node identity f7, cluster identity 4711 [ 136.596496][ T8308] tipc: Node number set to 247 [ 136.604394][ T8307] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.636359][ T8307] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.668388][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 136.683421][ T8307] SELinux: Context Ü is not valid (left unmapped). [ 136.699611][ T8056] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.776108][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.783215][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.790971][ T8285] bridge_slave_0: entered allmulticast mode [ 136.797854][ T8285] bridge_slave_0: entered promiscuous mode [ 136.833483][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 136.833900][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.833930][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.834163][ T8285] bridge_slave_1: entered allmulticast mode [ 136.834779][ T8285] bridge_slave_1: entered promiscuous mode [ 136.847569][ T8329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.883444][ T8323] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 136.899106][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.909643][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.936300][ T8285] team0: Port device team_slave_0 added [ 136.943663][ T8334] siw: device registration error -23 [ 136.960183][ T8285] team0: Port device team_slave_1 added [ 136.991208][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.998238][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.024161][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.035271][ T8341] vcan0 speed is unknown, defaulting to 1000 [ 137.043066][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.050069][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.076024][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.091816][ T8341] lo speed is unknown, defaulting to 1000 [ 137.120248][ T8285] hsr_slave_0: entered promiscuous mode [ 137.126736][ T8285] hsr_slave_1: entered promiscuous mode [ 137.134439][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.142110][ T8285] Cannot create hsr debugfs directory [ 137.180150][ T8352] loop3: detected capacity change from 0 to 1024 [ 137.205332][ T8352] EXT4-fs: Ignoring removed orlov option [ 137.211088][ T8352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.229284][ T8352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.256882][ T8285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.340407][ T8285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.399703][ T8285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.459704][ T8285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.529314][ T8285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.537628][ T8285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.545915][ T8285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.554352][ T8285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.589011][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.601729][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.611277][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.618350][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.630950][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.638028][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.718929][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.781258][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.993'. [ 137.803554][ T8285] veth0_vlan: entered promiscuous mode [ 137.812516][ T8285] veth1_vlan: entered promiscuous mode [ 137.847838][ T8285] veth0_macvtap: entered promiscuous mode [ 137.855754][ T8285] veth1_macvtap: entered promiscuous mode [ 137.869207][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.879726][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.889931][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.900407][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.910686][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.921208][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.931114][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.941551][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.951444][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.961885][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.971757][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.982200][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.994577][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.002902][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.003390][ T8056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.013457][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.013469][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.013480][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.013490][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.013503][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.013515][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.084353][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.094299][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.104890][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.104904][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.125517][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.127668][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.151046][ T8376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.996'. [ 138.200701][ T8285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.209520][ T8285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.218298][ T8285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.227020][ T8285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.238378][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 138.337464][ T8373] veth1_vlan (unregistering): left allmulticast mode [ 138.350924][ T8373] macvlan0 (unregistering): left allmulticast mode [ 138.765399][ T8397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=8397 comm=syz.4.999 [ 138.769654][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 138.769702][ T29] audit: type=1326 audit(1727515583.730:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.811670][ T29] audit: type=1326 audit(1727515583.730:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.835027][ T29] audit: type=1326 audit(1727515583.730:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.858337][ T29] audit: type=1326 audit(1727515583.730:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.881668][ T29] audit: type=1326 audit(1727515583.730:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.881700][ T8397] loop4: detected capacity change from 0 to 512 [ 138.904978][ T29] audit: type=1326 audit(1727515583.730:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.905007][ T29] audit: type=1326 audit(1727515583.730:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.957712][ T29] audit: type=1326 audit(1727515583.730:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 138.981040][ T29] audit: type=1326 audit(1727515583.730:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 139.004339][ T29] audit: type=1326 audit(1727515583.730:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e272dff9 code=0x7ffc0000 [ 139.027988][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.035234][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.044086][ T8397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 139.062586][ T8397] System zones: 0-2, 18-18, 34-34 [ 139.080082][ T8397] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.099047][ T8397] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 139.120590][ T8402] bridge_slave_1: left allmulticast mode [ 139.126390][ T8402] bridge_slave_1: left promiscuous mode [ 139.132161][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.149605][ T8397] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 139.166943][ T8397] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.999: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 139.206801][ T8402] bridge_slave_0: left allmulticast mode [ 139.212780][ T8402] bridge_slave_0: left promiscuous mode [ 139.218508][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.238918][ T8397] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.999: couldn't read orphan inode 13 (err -117) [ 139.262451][ T8397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.288588][ T8399] vcan0 speed is unknown, defaulting to 1000 [ 139.321853][ T8397] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 139.331443][ T8397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 139.359044][ T8397] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 139.391620][ T8399] lo speed is unknown, defaulting to 1000 [ 139.524838][ T8415] Dead loop on virtual device ip6_vti0, fix it urgently! [ 139.578933][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.619196][ T8421] loop4: detected capacity change from 0 to 256 [ 139.637293][ T8421] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 139.645444][ T8421] FAT-fs (loop4): Filesystem has been set read-only [ 139.672608][ T3891] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 139.839530][ T8434] loop4: detected capacity change from 0 to 512 [ 139.846175][ T8434] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.854429][ T8434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.863276][ T8434] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 139.875103][ T8434] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.883230][ T8434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.891311][ T8434] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1008: Invalid block bitmap block 0 in block_group 0 [ 139.905897][ T8434] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1008: Invalid block bitmap block 0 in block_group 0 [ 139.997067][ T8434] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1008: Invalid block bitmap block 0 in block_group 0 [ 140.012872][ T8434] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1008: Failed to acquire dquot type 1 [ 140.046601][ T8434] EXT4-fs (loop4): 1 orphan inode deleted [ 140.052563][ T55] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:4: Failed to release dquot type 1 [ 140.084835][ T8434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.175478][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.208464][ T8440] loop4: detected capacity change from 0 to 164 [ 140.218729][ T8440] syz.4.1009: attempt to access beyond end of device [ 140.218729][ T8440] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.234326][ T8440] syz.4.1009: attempt to access beyond end of device [ 140.234326][ T8440] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.284128][ T8442] loop4: detected capacity change from 0 to 128 [ 140.970496][ T8448] loop4: detected capacity change from 0 to 512 [ 141.027141][ T8448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.060545][ T8448] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.187894][ T3891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.242851][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 141.254828][ T8466] loop4: detected capacity change from 0 to 2048 [ 141.327145][ T8466] loop4: p1 < > p4 [ 141.334394][ T8466] loop4: p4 size 8388608 extends beyond EOD, truncated [ 141.351232][ T8469] block device autoloading is deprecated and will be removed. [ 141.366731][ T8469] syz.0.1015: attempt to access beyond end of device [ 141.366731][ T8469] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.388689][ T8466] __nla_validate_parse: 1 callbacks suppressed [ 141.388702][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 141.403821][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 141.451600][ T8471] hsr0: entered promiscuous mode [ 141.659510][ T8474] loop3: detected capacity change from 0 to 512 [ 141.678609][ T8474] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 141.721429][ T8474] loop3: detected capacity change from 0 to 512 [ 141.728454][ T8477] loop4: detected capacity change from 0 to 512 [ 141.750365][ T8474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.750961][ T8477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.783739][ T8474] EXT4-fs (loop3): 1 truncate cleaned up [ 141.793391][ T8474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.817371][ T8477] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.878589][ T8477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.978123][ T8056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.989534][ T8458] ================================================================== [ 141.997626][ T8458] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 142.004916][ T8458] [ 142.007228][ T8458] write to 0xffff888115efac88 of 4 bytes by task 8449 on cpu 1: [ 142.014848][ T8458] touch_atime+0x1f3/0x350 [ 142.019257][ T8458] splice_direct_to_actor+0x51b/0x670 [ 142.024624][ T8458] do_splice_direct+0xd7/0x150 [ 142.029382][ T8458] do_sendfile+0x39b/0x970 [ 142.033794][ T8458] __x64_sys_sendfile64+0x110/0x150 [ 142.038982][ T8458] x64_sys_call+0xed5/0x2d60 [ 142.043567][ T8458] do_syscall_64+0xc9/0x1c0 [ 142.048058][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.053952][ T8458] [ 142.056260][ T8458] read to 0xffff888115efac88 of 4 bytes by task 8458 on cpu 0: [ 142.063790][ T8458] atime_needs_update+0x261/0x3e0 [ 142.068806][ T8458] touch_atime+0x4a/0x350 [ 142.073124][ T8458] shmem_file_splice_read+0x561/0x5c0 [ 142.078486][ T8458] splice_direct_to_actor+0x269/0x670 [ 142.083854][ T8458] do_splice_direct+0xd7/0x150 [ 142.088612][ T8458] do_sendfile+0x39b/0x970 [ 142.093017][ T8458] __x64_sys_sendfile64+0x110/0x150 [ 142.098204][ T8458] x64_sys_call+0xed5/0x2d60 [ 142.102787][ T8458] do_syscall_64+0xc9/0x1c0 [ 142.107279][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.113166][ T8458] [ 142.115474][ T8458] value changed: 0x39d7576b -> 0x3a6fedeb [ 142.121172][ T8458] [ 142.123478][ T8458] Reported by Kernel Concurrency Sanitizer on: [ 142.129620][ T8458] CPU: 0 UID: 0 PID: 8458 Comm: syz.2.1011 Tainted: G W 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 142.141414][ T8458] Tainted: [W]=WARN [ 142.145199][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.155241][ T8458] ================================================================== [ 142.187071][ T8483] loop3: detected capacity change from 0 to 2048 [ 142.216330][ T8483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.258132][ T8056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.