last executing test programs: 18.199727839s ago: executing program 4 (id=71): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 17.936861369s ago: executing program 4 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 17.845710209s ago: executing program 4 (id=82): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) memfd_secret(0x80000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 17.803838009s ago: executing program 4 (id=84): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 17.278158611s ago: executing program 4 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xd1af, 0xf09}}}]}, 0x38}}, 0x810) 16.721474301s ago: executing program 4 (id=111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) 16.700844632s ago: executing program 32 (id=111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) 11.351591813s ago: executing program 5 (id=228): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)) pipe(&(0x7f0000002640)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x4c}}, 0x0) 11.067321724s ago: executing program 5 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e408"], 0xfdef) 10.355661566s ago: executing program 5 (id=242): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) socket(0x2, 0x3, 0xff) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x2, 0x7, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e20, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) 10.174960326s ago: executing program 5 (id=246): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x81000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x10, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0xe]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000008c0)='./file1\x00', 0xc0ed001e, &(0x7f0000000580)={[{@minixdf}, {@data_err_abort}, {@debug}, {@noauto_da_alloc}, {@debug}, {@commit={'commit', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}]}, 0xfe, 0x481, &(0x7f0000000900)="$eJzs3M1vFOUfAPDvbF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB4qm2hVQKNbQmQohWD3g0RO/G/8J40otRL5p41bshIYYLqJc1szPTlmWndOl2F7qfTzLleXYe9nm+M/PMPDPP7gbQtYbSP0nE/yLi94gYyLK3FhjK/rl5/dLE39cvTSRRrb71V1Ird+P6pYmiaPH/tmWZajXPb2pQ7+V3IsZnZqbO5/mR+bPvj8xduPjC9Nnx01Onp86NHTt2+NDe/qNjR1oSZxrXjd0fze7ZdfzklTcmTlx596ekN7K4oy6OVhnKtm5DT7e6sg7bvixd27CL9v2ylG50JNBJPRGR7q6+Wv8fiJ7YsrhuIF77tKONA9ZVtVqtrnBWXqgCG1gSi8ktHW0I0GbFhT69/y2WNg097gnXXs5ugNK4b+ZLtqY3KlliX1/d/W0rDUXEiYV/vkqXWKfnEAAAy32Xjn+ebzT+q8TDWaI//fP/fA5lMCIeiIgdEfFgROyMiIciamUfiYhHm6y/fobk9vFP5epdB7cK6fjvpXxu69bxX6UoMtiT57bX4u9LTk3PTB3Mt8mB6Nt0ajqZGl2hju9f/e3zsnXLx3/pktZfjAXzdlztrXtANzk+P76WmJe79knE7t5G8SdRTOMkEbErInbfZR3Tz/aWrrtz/Csof9tVq34d8Uy2/xeiLv5CUjo/Ofri0bEjI5tjZurgSHFU3O7nXy+/2bj2k2uLvwXS/b+14fG/GP9gsjli7sLFM7X52rnm67j8x2el9zRNHv/Ht+fHf3/ydu2F/nzFh+Pz8+dHI/qT129/fWzp3Yp8UT6N/8D+xv1/RyxticciYk9E7I2Ix9ObwrztT0TEkxGxf4X4f3zlqfeaj789c6Vp/JP1+z9ZWF5kMI1/af83n+g588O3d45/c0SU7f/DX0TtXJtZzflvtQ1cy7YDAACA+0Wl9hn4pDK8mK5Uhoezz/DvjK2Vmdm5+edOzX5wbjL7rPxg9FWKJ10Dy56HjubPhov8WF3+UP7c+MueLbX88MTszGSng4cut62k/6f+7Ol064B114J5NOA+pf9D9yrr/4NtbgfQXonrP3Q1/R+6V6P+/3Fp6eFv1rUxQFu5/kP3Wuz/faVF8m8ElY8KgPuT6z90L/0fulLpd+Mra/rKf9sT/+a/Z3ivtGfjJ6JyTzRj4yd6V/1jFk0kqgNZ/09f2dSwTKfPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//4qHmSA==") 9.430660478s ago: executing program 5 (id=258): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 8.831995349s ago: executing program 5 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 8.797578519s ago: executing program 33 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 2.051958815s ago: executing program 0 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.991924435s ago: executing program 0 (id=381): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) 1.805147146s ago: executing program 0 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1.704610126s ago: executing program 2 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES64, @ANYRES32], 0x5, 0x31e, &(0x7f0000000a80)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) 1.607886656s ago: executing program 0 (id=393): socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0}}, 0x4004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003060108000000000000000005000005050001000700000045000100070000000900020073797a32000000000a8644268a6282"], 0x30}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 1.586768556s ago: executing program 1 (id=394): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001a80)=""/4096, 0x1000) 1.383913917s ago: executing program 1 (id=397): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x20a2, 0x1, 0x6, 0x400}) 1.164511677s ago: executing program 1 (id=398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = gettid() r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) listen(r3, 0x0) accept4$llc(r3, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.024470948s ago: executing program 0 (id=399): pipe(&(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000000c0)="03", 0x1, 0x0, 0x0, 0x0) 888.111588ms ago: executing program 1 (id=400): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 884.827088ms ago: executing program 3 (id=401): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 788.462608ms ago: executing program 6 (id=402): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r2) 785.514198ms ago: executing program 1 (id=403): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x0, 0xffd, 0xffffffb8}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") 759.662908ms ago: executing program 3 (id=404): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x200000000000023a, &(0x7f00000000c0)}) syz_emit_ethernet(0x2f, &(0x7f0000000300)={@local, @broadcast, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@llc={0x4, {@snap={0x1, 0x0, "d756", "d52679", 0x884c, "ec1e6fd7efc8914c418b08ee833d9dc3"}}}}}, &(0x7f0000000340)={0x0, 0x3, [0x455, 0xcc1, 0x8dc, 0x235]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)="114085b3bf6ad1b71a94b18d57877533983ae67ae8115c05865b2ced905fdd5cdd084c25b38e5b6fb981b72e876b069f3070bfb3153d13de78f02ed033f2f883bd51d6fc14af57f1ca84", 0x4a, 0x2) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 712.022828ms ago: executing program 2 (id=405): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/89) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 659.641728ms ago: executing program 3 (id=406): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 640.442968ms ago: executing program 6 (id=407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000480), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000000b72000", "0d07080d004fcfabd5e8ffff1a8600", "aba200fe", "865703b7e43b34e4"}, 0x28) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r2) 564.035208ms ago: executing program 6 (id=408): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$eJzs3U1PE1sYwPGnLxRaAsPi5t5cE8OJbnQzgepaaQwkxiYSpMaXxGSQqTYdWzLTYGqM6Mqt8UO4ICzZkShfgI073bhxx8bEhSyMYzqdodAOb6VQAv9fQubJnPNMz+kMyXMmzLB+792zYt7R80ZFon1KIiIiGyJDEpVAxN9GvTghW72Wy/0/v5y/c//BrUw2Oz6l1ERm+kpaKTU4/PH5y6TfbaVX1oYerf9If1/7d+3/9T/TTwuOKjiqVK4oQ82Uv1WMGctUswWnqCs1aZmGY6pCyTHtenu53p63ynNzVWWUZgdSc7bpOMooVVXRrKpKWVXsqoo9MQolpeu6GkgJ9pJbnJoyMm0m93V4MDgitp0xYiKSbGnJLXZlQAAAoKua6/+oqE7W/0sXViv9d5cH/fp/JRFW/1/9Wj/Wtvq/Vl2G1v/B54fW/8bB6v/WiuhsOVT9j5NhONGyK9IIa412xkj5v7+eNw+XRqTn2AYIAAAAAAAAAAAAAAAAAAAAAAAOZ8N1Ndd1tWDrxkXEdbVe/wFv198fkhoTketdGDI6qOX8+z/7OP84BRoP7sUHRay387n5XH3rd1gVEUtMGRFNfnvXg68WB08eqZoh+WQt+PkL87mY15LJS8HLHxWtR5rzXXfiZnZ8VNVtz++R1Nb8tGjyT3h+OjQ/IZcubsnXRZPPj6Uslsx642jkvxpV6sbtbFN+0usHAAAAAMBpoKtNoet3Xd+pvZ6/ub5uvj8Qa6yvR0LX53E5F+/u3AEAAAAAOCuc6ouiYVmmvUuQlL37tB/Ej+jIwQz3mxX8LcPRzXSXIPjwbU3BP9jo+NcSOcDXskMQlXayhmuzUYedRXDbaKc+Mjl2/GfQC/57/+FX5w54bblvj5m2H8R2vwB4OTAAAABwCjWK/mDPWHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGXQcb0fr9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JvAAAA///+mQDw") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) 563.774309ms ago: executing program 2 (id=409): recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0xc0481273, &(0x7f0000000000)=0x2085) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 485.094169ms ago: executing program 1 (id=410): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x507, &(0x7f0000000b40)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 458.774789ms ago: executing program 3 (id=411): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 340.078759ms ago: executing program 2 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 339.834479ms ago: executing program 3 (id=413): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x1, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 305.803599ms ago: executing program 6 (id=414): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 291.847979ms ago: executing program 2 (id=415): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) name_to_handle_at(r4, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 152.04801ms ago: executing program 2 (id=416): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x507, &(0x7f0000000b40)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 151.71235ms ago: executing program 6 (id=417): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x300, 0xffffffffffffffff, &(0x7f0000000040)={0x32000000}) creat(&(0x7f0000000000)='./file0\x00', 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x3, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x300000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) 102.86071ms ago: executing program 3 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="6ce4994a041e7be8dca40d07f47712b6d4d288c019bdf94984c56c505613ad6394d7b449c3fd0a8de3385da3da6c57428f2e491efd1b7dfedd04aac1a51e5bdba4a3fa1102f0b9e1c3dcf0c9ca5a791c50a0039bebc922961b52d43aa3d3a0e7c6b25a3fdd3373ca99b51a7c63732f77408e4a46135a0710ad59dccdd7f552e2cf67a1b47377ffe8c136cc4a58581712c9d21c23d541a4f8f153befd7e24d031b375ccea89dae146"], 0x1, 0x251, &(0x7f0000000880)="$eJzs3UFLVGsYB/BndESvcBkXF+RK0In2gxrtlVCQBopiFrVKUikcExKEWqit+ght6ivUJmgbtIi2fYEIwoI22spFMKFndHScqbEaT+Tvt/HB9/3P+54zhzkzi3nmxqmF+ZnFpbnNzfXo68v15Mfi+dBWLgYiojtSawEA/E22qtXYqKay3gsAcDzc/wHg5Knf/3OH7v+5tb33BJePf2cAQKf4/A8AJ8/Va9cvjpdKE1c2kr6IhYfL5eVy+jcdH5+L21GJ2RiOQnyNqO5J60dTpYnhZNvHgSgvrNbyq8vl7oP5kSjEwOH85FRpYiRJHcz3RH8t/64/ZmM0CvFf8/xos3xPRJzdt34xCvH2ZixGJWZiO1vPr4wkyYVLpYb1e3fmAQAAAAAAAAAAAAAAAAAAAABAJxS7dlrnVHuTpGn/nmIx2dUwnub39wf6p0l/oMm9/kCN/X3yMZTP9tgBAAAAAAAAAAAAAAAAAADgT7F07/78dKUye/d7xZ03T1/9aE6bRa627r6hWr+A1elKb0T8+hJtFv+e+fC49ZwHRzk/v7d4efqYF90+7UdNvV6/9f+5pcHzreZEvmN77vqZJ+VzoWOX1rPdYuxLBldLq6K78T+DT8amX6y8/9Tu42T4ogQAAAAAAAAAAAAAAAAAACdU/Uu/We8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALJT//3/FkUuWg61WaxlfYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAtAAD//2EfqVI=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 54.02527ms ago: executing program 6 (id=419): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[], 0x0) 0s ago: executing program 0 (id=420): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 33.916542][ T29] audit: type=1400 audit(1733573357.409:81): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.917819][ T3290] cgroup: Unknown subsys name 'net' [ 33.939290][ T29] audit: type=1400 audit(1733573357.409:82): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.966706][ T29] audit: type=1400 audit(1733573357.439:83): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.986579][ T29] audit: type=1400 audit(1733573357.439:84): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.106957][ T3290] cgroup: Unknown subsys name 'cpuset' [ 34.113171][ T3290] cgroup: Unknown subsys name 'rlimit' [ 34.263849][ T29] audit: type=1400 audit(1733573357.749:85): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.287158][ T29] audit: type=1400 audit(1733573357.749:86): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.307663][ T29] audit: type=1400 audit(1733573357.749:87): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.316216][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.328111][ T29] audit: type=1400 audit(1733573357.749:88): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.356969][ T29] audit: type=1400 audit(1733573357.749:89): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.381892][ T29] audit: type=1400 audit(1733573357.749:90): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.409686][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.505605][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 35.554105][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.577495][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.615726][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.622852][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.630115][ T3299] bridge_slave_0: entered allmulticast mode [ 35.636695][ T3299] bridge_slave_0: entered promiscuous mode [ 35.645651][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.652738][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.659954][ T3299] bridge_slave_1: entered allmulticast mode [ 35.666525][ T3299] bridge_slave_1: entered promiscuous mode [ 35.733565][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.749782][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.759043][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.780393][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.810477][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.817610][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.824755][ T3301] bridge_slave_0: entered allmulticast mode [ 35.831315][ T3301] bridge_slave_0: entered promiscuous mode [ 35.853696][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.860819][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.868014][ T3301] bridge_slave_1: entered allmulticast mode [ 35.874337][ T3301] bridge_slave_1: entered promiscuous mode [ 35.880637][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.887733][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.894922][ T3303] bridge_slave_0: entered allmulticast mode [ 35.901315][ T3303] bridge_slave_0: entered promiscuous mode [ 35.908618][ T3299] team0: Port device team_slave_0 added [ 35.914378][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.921519][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.928686][ T3303] bridge_slave_1: entered allmulticast mode [ 35.935009][ T3303] bridge_slave_1: entered promiscuous mode [ 35.951257][ T3299] team0: Port device team_slave_1 added [ 35.973120][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.994210][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.001211][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.027129][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.043375][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.060322][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.070442][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.079822][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.086902][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.113069][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.133975][ T3303] team0: Port device team_slave_0 added [ 36.151378][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.158626][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.165886][ T3307] bridge_slave_0: entered allmulticast mode [ 36.172268][ T3307] bridge_slave_0: entered promiscuous mode [ 36.179515][ T3303] team0: Port device team_slave_1 added [ 36.185208][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.192289][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.199479][ T3307] bridge_slave_1: entered allmulticast mode [ 36.205795][ T3307] bridge_slave_1: entered promiscuous mode [ 36.218080][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.225305][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.232603][ T3306] bridge_slave_0: entered allmulticast mode [ 36.239025][ T3306] bridge_slave_0: entered promiscuous mode [ 36.245705][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.252815][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.260035][ T3306] bridge_slave_1: entered allmulticast mode [ 36.266671][ T3306] bridge_slave_1: entered promiscuous mode [ 36.297588][ T3301] team0: Port device team_slave_0 added [ 36.312745][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.319863][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.345898][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.362825][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.372462][ T3301] team0: Port device team_slave_1 added [ 36.379141][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.389362][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.403414][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.410449][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.436492][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.457394][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.479447][ T3307] team0: Port device team_slave_0 added [ 36.487384][ T3299] hsr_slave_0: entered promiscuous mode [ 36.493470][ T3299] hsr_slave_1: entered promiscuous mode [ 36.510111][ T3306] team0: Port device team_slave_0 added [ 36.516982][ T3306] team0: Port device team_slave_1 added [ 36.523539][ T3307] team0: Port device team_slave_1 added [ 36.536943][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.543920][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.570006][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.581394][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.588407][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.614392][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.658256][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.665230][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.691442][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.703734][ T3303] hsr_slave_0: entered promiscuous mode [ 36.709820][ T3303] hsr_slave_1: entered promiscuous mode [ 36.715804][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.723707][ T3303] Cannot create hsr debugfs directory [ 36.733748][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.740830][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.766745][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.777902][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.784870][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.810846][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.825898][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.832881][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.858885][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.892167][ T3301] hsr_slave_0: entered promiscuous mode [ 36.898113][ T3301] hsr_slave_1: entered promiscuous mode [ 36.903963][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.911556][ T3301] Cannot create hsr debugfs directory [ 36.930440][ T3306] hsr_slave_0: entered promiscuous mode [ 36.936544][ T3306] hsr_slave_1: entered promiscuous mode [ 36.942352][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.949971][ T3306] Cannot create hsr debugfs directory [ 36.983913][ T3307] hsr_slave_0: entered promiscuous mode [ 36.990249][ T3307] hsr_slave_1: entered promiscuous mode [ 36.996327][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.003896][ T3307] Cannot create hsr debugfs directory [ 37.171027][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.187530][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.198734][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.209631][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.219948][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.228874][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.238807][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.248373][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.282661][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.292136][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.301416][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.312387][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.351312][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.361446][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.384113][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.392970][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.430033][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.439093][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.448435][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.457576][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.468098][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.480951][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.503932][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.522110][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.529244][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.551211][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.562492][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.580109][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.587247][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.602282][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.610755][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.617845][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.632654][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.641098][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.648201][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.671150][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.678256][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.691739][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.698835][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.710367][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.736647][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.743837][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.758787][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.770769][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.777872][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.801319][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.838129][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.848718][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.867838][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.874940][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.888469][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.895734][ T1761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.906238][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.946673][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.052172][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.062149][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.074048][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.106671][ T3299] veth0_vlan: entered promiscuous mode [ 38.147008][ T3299] veth1_vlan: entered promiscuous mode [ 38.154984][ T3303] veth0_vlan: entered promiscuous mode [ 38.183191][ T3299] veth0_macvtap: entered promiscuous mode [ 38.207131][ T3299] veth1_macvtap: entered promiscuous mode [ 38.229731][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.240292][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.251330][ T3303] veth1_vlan: entered promiscuous mode [ 38.261393][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.270225][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.279035][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.287926][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.302301][ T3301] veth0_vlan: entered promiscuous mode [ 38.321503][ T3301] veth1_vlan: entered promiscuous mode [ 38.341387][ T3306] veth0_vlan: entered promiscuous mode [ 38.348411][ T3303] veth0_macvtap: entered promiscuous mode [ 38.361562][ T3306] veth1_vlan: entered promiscuous mode [ 38.378022][ T3301] veth0_macvtap: entered promiscuous mode [ 38.385457][ T3303] veth1_macvtap: entered promiscuous mode [ 38.402686][ T3301] veth1_macvtap: entered promiscuous mode [ 38.419876][ T3307] veth0_vlan: entered promiscuous mode [ 38.427725][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.431659][ T3306] veth0_macvtap: entered promiscuous mode [ 38.455077][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.465664][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.480812][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.491076][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.501631][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.511489][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.522085][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.533078][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.547942][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.558456][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.570225][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.578293][ T3307] veth1_vlan: entered promiscuous mode [ 38.590339][ T3307] veth0_macvtap: entered promiscuous mode [ 38.597664][ T3306] veth1_macvtap: entered promiscuous mode [ 38.613183][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.622158][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.630984][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.639864][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.683105][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.693675][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.703552][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.714051][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.727414][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.744720][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.755265][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.765100][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.775632][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.785558][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.796020][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.808610][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.816541][ T3307] veth1_macvtap: entered promiscuous mode [ 38.830405][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.831462][ T3442] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 38.840948][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.856998][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.867573][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.877410][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.887879][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.898609][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.906915][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.915644][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.924379][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.933154][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945541][ T3442] syzkaller1: entered promiscuous mode [ 38.951138][ T3442] syzkaller1: entered allmulticast mode [ 38.959677][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.968515][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977384][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.986105][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.010448][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.020926][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.030865][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.041336][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.051430][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.061958][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.071818][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.082278][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.092783][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.101355][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.111834][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.121678][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.132220][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.142101][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.152595][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.162463][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.172906][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.183402][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.216218][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.225005][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.233772][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.242578][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.253349][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 39.253414][ T29] audit: type=1400 audit(1733573362.709:133): avc: denied { read append } for pid=3447 comm="syz.0.7" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.283000][ T29] audit: type=1400 audit(1733573362.709:134): avc: denied { open } for pid=3447 comm="syz.0.7" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.369663][ T29] audit: type=1400 audit(1733573362.859:135): avc: denied { prog_run } for pid=3452 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.406867][ T3457] syz.4.5[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.406997][ T3457] syz.4.5[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.424651][ T3455] loop2: detected capacity change from 0 to 512 [ 39.458528][ T3457] syz.4.5[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.460625][ T29] audit: type=1400 audit(1733573362.949:136): avc: denied { read write } for pid=3456 comm="syz.4.5" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.496706][ T3455] EXT4-fs: Ignoring removed oldalloc option [ 39.511873][ T29] audit: type=1400 audit(1733573362.949:137): avc: denied { name_bind } for pid=3452 comm="syz.1.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.518819][ T3448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.533356][ T29] audit: type=1400 audit(1733573362.949:138): avc: denied { node_bind } for pid=3452 comm="syz.1.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 39.546495][ T3455] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3: Parent and EA inode have the same ino 15 [ 39.563059][ T29] audit: type=1400 audit(1733573362.999:139): avc: denied { open } for pid=3447 comm="syz.0.7" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.597363][ T29] audit: type=1400 audit(1733573362.999:140): avc: denied { ioctl } for pid=3447 comm="syz.0.7" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.622419][ T3448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.648905][ T3455] EXT4-fs (loop2): Remounting filesystem read-only [ 39.655500][ T3455] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.668616][ T3455] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 39.679173][ T29] audit: type=1400 audit(1733573363.159:141): avc: denied { create } for pid=3465 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 39.698501][ T29] audit: type=1400 audit(1733573363.159:142): avc: denied { bind } for pid=3465 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 39.722165][ T3463] Illegal XDP return value 1038264263 on prog (id 7) dev N/A, expect packet loss! [ 39.723133][ T3455] EXT4-fs (loop2): 1 orphan inode deleted [ 39.737996][ T3455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.750427][ T3455] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 39.757816][ T3455] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.862149][ T3477] loop2: detected capacity change from 0 to 512 [ 39.875312][ T3477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.890477][ T3477] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 39.934567][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.940125][ T3475] loop3: detected capacity change from 0 to 2048 [ 39.968506][ T3475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.024742][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.093335][ T3487] SELinux: syz.2.17 (3487) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.279191][ T3496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.390696][ T3499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.402862][ T3499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 40.798935][ T3513] loop0: detected capacity change from 0 to 512 [ 40.839902][ T3513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.861258][ T3513] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.909392][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.951305][ T3517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.017115][ T3519] loop3: detected capacity change from 0 to 128 [ 41.034032][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888117b35600: rx timeout, send abort [ 41.042507][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888117b35600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.081058][ T3519] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 41.101450][ T3519] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 41.195497][ T3526] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz.3.30: No space for directory leaf checksum. Please run e2fsck -D. [ 41.211113][ T3526] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #11: comm syz.3.30: checksumming directory block 0 [ 41.341169][ T3534] hub 6-0:1.0: USB hub found [ 41.346205][ T3534] hub 6-0:1.0: 8 ports detected [ 41.402048][ T3539] loop2: detected capacity change from 0 to 512 [ 41.427661][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.440487][ T3539] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.460905][ T3517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.481875][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.489547][ T3380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.496557][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.499220][ T3380] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.508273][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.533397][ T3517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.579729][ T3547] pim6reg1: entered promiscuous mode [ 41.585120][ T3547] pim6reg1: entered allmulticast mode [ 41.609394][ T3517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.671551][ T3517] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.683266][ T3517] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.694443][ T3517] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.705573][ T3517] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.849368][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.188296][ T3567] pim6reg: entered allmulticast mode [ 42.195192][ T3567] pim6reg: left allmulticast mode [ 42.292734][ T3574] syz.0.53: attempt to access beyond end of device [ 42.292734][ T3574] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 42.299334][ T3571] syzkaller0: entered promiscuous mode [ 42.311215][ T3571] syzkaller0: entered allmulticast mode [ 42.375231][ T3577] hub 2-0:1.0: USB hub found [ 42.380107][ T3577] hub 2-0:1.0: 8 ports detected [ 42.494134][ T3592] loop1: detected capacity change from 0 to 256 [ 42.527544][ T1037] kernel write not supported for file /sg0 (pid: 1037 comm: kworker/0:2) [ 42.554990][ T3598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 42.578328][ T3597] loop2: detected capacity change from 0 to 2048 [ 42.586332][ T3598] vlan2: entered promiscuous mode [ 42.591513][ T3598] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 42.604507][ T3598] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 42.613953][ T3600] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 42.618934][ T3597] loop2: p3 < > p4 < > [ 42.625889][ T3597] loop2: partition table partially beyond EOD, truncated [ 42.631048][ T3602] loop0: detected capacity change from 0 to 2048 [ 42.637333][ T3597] loop2: p3 start 4284289 is beyond EOD, truncated [ 42.654984][ T3600] geneve1: entered promiscuous mode [ 42.663998][ T3600] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 42.676439][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.709224][ T3600] syz.1.66 (3600) used greatest stack depth: 10752 bytes left [ 42.727888][ T3609] loop2: detected capacity change from 0 to 128 [ 42.735769][ T3602] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.751391][ T3602] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 42.763831][ T3602] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.763831][ T3602] [ 42.773543][ T3602] EXT4-fs (loop0): Total free blocks count 0 [ 42.779706][ T3602] EXT4-fs (loop0): Free/Dirty block details [ 42.785611][ T3602] EXT4-fs (loop0): free_blocks=2415919104 [ 42.791495][ T3602] EXT4-fs (loop0): dirty_blocks=16 [ 42.796673][ T3602] EXT4-fs (loop0): Block reservation details [ 42.802671][ T3602] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 42.808372][ T3609] syz.2.69: attempt to access beyond end of device [ 42.808372][ T3609] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 42.824592][ T3602] syz.0.67 (3602) used greatest stack depth: 10216 bytes left [ 42.846226][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.847826][ T3613] pim6reg1: entered promiscuous mode [ 42.860594][ T3613] pim6reg1: entered allmulticast mode [ 42.868371][ T3618] pim6reg1: entered promiscuous mode [ 42.873688][ T3618] pim6reg1: entered allmulticast mode [ 42.882017][ T3615] syz.3.72[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.882090][ T3615] syz.3.72[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.893599][ T3615] syz.3.72[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.141154][ T3646] loop4: detected capacity change from 0 to 512 [ 43.170526][ T3648] loop3: detected capacity change from 0 to 256 [ 43.190938][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.211658][ T3648] loop3: detected capacity change from 0 to 512 [ 43.219342][ T3646] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.239018][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.252042][ T3648] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.263750][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.316691][ T3646] loop4: detected capacity change from 512 to 0 [ 43.323322][ T3662] syz.4.84: attempt to access beyond end of device [ 43.323322][ T3662] loop4: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 43.338147][ T3662] EXT4-fs error (device loop4): ext4_write_dquot:6918: comm syz.4.84: Failed to commit dquot type 1 [ 43.362480][ T3662] syz.4.84: attempt to access beyond end of device [ 43.362480][ T3662] loop4: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 43.375969][ T3662] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.386498][ T3662] EXT4-fs (loop4): I/O error while writing superblock [ 43.393575][ T3662] syz.4.84: attempt to access beyond end of device [ 43.393575][ T3662] loop4: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 43.407500][ T3662] syz.4.84: attempt to access beyond end of device [ 43.407500][ T3662] loop4: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 43.421798][ T3662] syz.4.84: attempt to access beyond end of device [ 43.421798][ T3662] loop4: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 43.435916][ T3662] EXT4-fs error (device loop4): ext4_get_inode_loc:4573: inode #20: block 35: comm syz.4.84: unable to read itable block [ 43.449285][ T3662] syz.4.84: attempt to access beyond end of device [ 43.449285][ T3662] loop4: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 43.462299][ T3662] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.472716][ T3662] EXT4-fs (loop4): I/O error while writing superblock [ 43.474700][ T3666] loop3: detected capacity change from 0 to 2048 [ 43.479638][ T3662] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: IO failure [ 43.495214][ T3662] syz.4.84: attempt to access beyond end of device [ 43.495214][ T3662] loop4: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 43.508418][ T3662] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.518438][ T3662] EXT4-fs (loop4): I/O error while writing superblock [ 43.525305][ T3662] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #20: comm syz.4.84: mark_inode_dirty error [ 43.538967][ T3662] syz.4.84: attempt to access beyond end of device [ 43.538967][ T3662] loop4: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 43.539431][ T3666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.552018][ T3662] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.552783][ T3662] EXT4-fs (loop4): I/O error while writing superblock [ 43.579482][ T3662] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 43.616541][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.630580][ T3307] EXT4-fs error (device loop4): ext4_get_inode_loc:4573: inode #2: block 34: comm syz-executor: unable to read itable block [ 43.645603][ T3307] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.654120][ T3307] EXT4-fs (loop4): I/O error while writing superblock [ 43.660980][ T3307] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: IO failure [ 43.666881][ T3674] capability: warning: `syz.2.94' uses 32-bit capabilities (legacy support in use) [ 43.669902][ T3307] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.688425][ T3307] EXT4-fs (loop4): I/O error while writing superblock [ 43.695227][ T3307] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 43.717380][ T3307] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.742450][ T3307] EXT4-fs (loop4): I/O error while writing superblock [ 43.754484][ T3680] loop1: detected capacity change from 0 to 1024 [ 43.772508][ T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4558: inode #4: block 34: comm kworker/u8:1: unable to read itable block [ 43.782993][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.787516][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.806998][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 43.813886][ T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4558: inode #18: block 35: comm kworker/u8:1: unable to read itable block [ 43.863157][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 43.878285][ T3688] loop0: detected capacity change from 0 to 1024 [ 43.884903][ T3688] ======================================================= [ 43.884903][ T3688] WARNING: The mand mount option has been deprecated and [ 43.884903][ T3688] and is ignored by this kernel. Remove the mand [ 43.884903][ T3688] option from the mount to silence this warning. [ 43.884903][ T3688] ======================================================= [ 43.919896][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 43.920572][ T3688] EXT4-fs: Ignoring removed nobh option [ 43.932980][ T3688] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.936390][ T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4558: inode #19: block 35: comm kworker/u8:1: unable to read itable block [ 43.944842][ T3688] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.99: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 43.959423][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.975647][ T3688] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.99: couldn't read orphan inode 11 (err -117) [ 43.996466][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 44.005085][ T3688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.050495][ T3695] serio: Serial port ptm0 [ 44.052296][ T3688] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.99: Invalid block bitmap block 0 in block_group 0 [ 44.090497][ T3688] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.99: Failed to acquire dquot type 0 [ 44.105894][ T3688] syz.0.99 (3688) used greatest stack depth: 10192 bytes left [ 44.116344][ T3699] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.104' sets config #1 [ 44.143232][ T1761] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm kworker/u8:7: Invalid inode table block 8589934593 in block_group 0 [ 44.160800][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.236774][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.257976][ C1] hrtimer: interrupt took 27223 ns [ 44.283953][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 44.284022][ T29] audit: type=1400 audit(1733573367.769:332): avc: denied { mounton } for pid=3716 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.303237][ T3719] loop2: detected capacity change from 0 to 1024 [ 44.338478][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.358957][ T3722] loop1: detected capacity change from 0 to 128 [ 44.389936][ T3719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.405532][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.430142][ T29] audit: type=1400 audit(1733573367.909:333): avc: denied { create } for pid=3730 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.449811][ T29] audit: type=1400 audit(1733573367.909:334): avc: denied { connect } for pid=3730 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.469401][ T29] audit: type=1400 audit(1733573367.909:335): avc: denied { write } for pid=3730 comm="syz.0.116" path="socket:[4756]" dev="sockfs" ino=4756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.508571][ T3719] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 44.565889][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.584011][ T3737] tipc: Started in network mode [ 44.589010][ T3737] tipc: Node identity 9a3ea150a9bf, cluster identity 4711 [ 44.596418][ T3737] tipc: Enabled bearer , priority 7 [ 44.631093][ T3737] ªªªªªª: renamed from syzkaller0 [ 44.642808][ T3737] tipc: Disabling bearer [ 44.660915][ T3741] loop1: detected capacity change from 0 to 1024 [ 44.667819][ T3741] EXT4-fs: Ignoring removed oldalloc option [ 44.678452][ T3741] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 44.685027][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.708254][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.762705][ T3716] chnl_net:caif_netlink_parms(): no params data found [ 44.782436][ T29] audit: type=1400 audit(1733573368.269:336): avc: denied { create } for pid=3746 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.792915][ T3747] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 44.801716][ T29] audit: type=1400 audit(1733573368.269:337): avc: denied { write } for pid=3746 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.828721][ T29] audit: type=1400 audit(1733573368.269:338): avc: denied { ioctl } for pid=3746 comm="syz.2.120" path="socket:[5699]" dev="sockfs" ino=5699 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.854694][ T29] audit: type=1400 audit(1733573368.339:339): avc: denied { setattr } for pid=3740 comm="syz.1.119" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.881499][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.888792][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.914006][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.921245][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.928698][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.935852][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.958903][ T3753] loop0: detected capacity change from 0 to 1024 [ 44.967849][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.998433][ T3753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.011929][ T3747] team0: Port device bridge0 added [ 45.025746][ T29] audit: type=1326 audit(1733573368.509:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd264cbfed9 code=0x7ffc0000 [ 45.049268][ T29] audit: type=1326 audit(1733573368.509:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd264cbfed9 code=0x7ffc0000 [ 45.073634][ T28] bridge_slave_1: left allmulticast mode [ 45.074303][ T3760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.123'. [ 45.079370][ T28] bridge_slave_1: left promiscuous mode [ 45.093873][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.134270][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.152794][ T28] bridge_slave_0: left allmulticast mode [ 45.158533][ T28] bridge_slave_0: left promiscuous mode [ 45.164262][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.270174][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.282227][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.302579][ T28] bond0 (unregistering): Released all slaves [ 45.331619][ T3762] team0: Device ipvlan2 failed to register rx_handler [ 45.356529][ T3775] syz.3.129 (3775) used greatest stack depth: 10040 bytes left [ 45.382463][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.389637][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.396990][ T3716] bridge_slave_0: entered allmulticast mode [ 45.403537][ T3716] bridge_slave_0: entered promiscuous mode [ 45.410446][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.417559][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.424702][ T3716] bridge_slave_1: entered allmulticast mode [ 45.431323][ T3716] bridge_slave_1: entered promiscuous mode [ 45.444803][ T28] hsr_slave_0: left promiscuous mode [ 45.459446][ T28] hsr_slave_1: left promiscuous mode [ 45.473928][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.481597][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.510810][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.518502][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.543474][ T28] veth1_macvtap: left promiscuous mode [ 45.549171][ T28] veth0_macvtap: left promiscuous mode [ 45.554743][ T28] veth1_vlan: left promiscuous mode [ 45.560174][ T28] veth0_vlan: left promiscuous mode [ 45.642140][ T28] team0 (unregistering): Port device team_slave_1 removed [ 45.653231][ T28] team0 (unregistering): Port device team_slave_0 removed [ 45.700854][ T3785] veth0_to_team: entered promiscuous mode [ 45.706660][ T3785] veth0_to_team: entered allmulticast mode [ 45.719488][ T3716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.730145][ T3716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.754468][ T3716] team0: Port device team_slave_0 added [ 45.771083][ T3716] team0: Port device team_slave_1 added [ 45.795605][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.802621][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.828579][ T3716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.848113][ T3802] syz_tun: entered promiscuous mode [ 45.857788][ T3802] vlan2: entered promiscuous mode [ 45.863953][ T3802] syz_tun: left promiscuous mode [ 45.872512][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.879568][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.905604][ T3716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.942097][ T3716] hsr_slave_0: entered promiscuous mode [ 45.948343][ T3716] hsr_slave_1: entered promiscuous mode [ 45.954385][ T3716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.962310][ T3716] Cannot create hsr debugfs directory [ 45.998818][ T3816] pim6reg1: entered promiscuous mode [ 46.004300][ T3816] pim6reg1: entered allmulticast mode [ 46.052145][ T3824] loop3: detected capacity change from 0 to 512 [ 46.068289][ T3824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.082530][ T3824] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.095242][ T3824] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.149: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 46.113235][ T3824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 46.122371][ T3824] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.149: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 46.140233][ T3824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 46.151273][ T3824] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.149: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 46.169437][ T3824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 46.175169][ T3716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.186980][ T3824] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.149: bg 0: block 18: invalid block bitmap [ 46.200949][ T3824] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.149: Failed to acquire dquot type 1 [ 46.215636][ T3716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.236765][ T3824] syz.3.149 (3824) used greatest stack depth: 9128 bytes left [ 46.238294][ T3716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.254826][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.272607][ T3716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.331392][ T3840] loop3: detected capacity change from 0 to 128 [ 46.348951][ T3840] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 46.368827][ T3716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.375429][ T3841] loop2: detected capacity change from 0 to 512 [ 46.406779][ T3845] loop1: detected capacity change from 0 to 128 [ 46.414370][ T3841] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.414416][ T3716] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.430544][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 46.440702][ T3845] EXT4-fs: Ignoring removed nobh option [ 46.442573][ T3841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.454164][ T3841] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.470315][ T3841] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 46.477631][ T3841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.152: bg 0: block 40: padding at end of block bitmap is not set [ 46.505269][ T1761] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.512429][ T1761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.524721][ T3841] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.547579][ T3845] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.567313][ T3845] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.578488][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.585576][ T1761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.603908][ T3841] EXT4-fs (loop2): 1 truncate cleaned up [ 46.633351][ T3716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.638699][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.643757][ T3716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.711842][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.745967][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 46.838038][ T3716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.103583][ T3716] veth0_vlan: entered promiscuous mode [ 47.117500][ T3716] veth1_vlan: entered promiscuous mode [ 47.142999][ T3716] veth0_macvtap: entered promiscuous mode [ 47.156095][ T3716] veth1_macvtap: entered promiscuous mode [ 47.172944][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.183650][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.193495][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.204015][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.213921][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.224396][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.234240][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.244816][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.255167][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.255531][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.274930][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.285388][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.295498][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.306023][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.315838][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.326341][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.336232][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.346786][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.357394][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.368547][ T3716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.377354][ T3716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.386189][ T3716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.394905][ T3716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.510485][ T3896] syz.5.165[3896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.510615][ T3896] syz.5.165[3896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.523920][ T3896] syz.5.165[3896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.613556][ T3900] sd 0:0:1:0: device reset [ 47.757335][ T3915] loop5: detected capacity change from 0 to 128 [ 47.831664][ T3918] loop3: detected capacity change from 0 to 512 [ 47.855030][ T3915] bio_check_eod: 25 callbacks suppressed [ 47.855049][ T3915] syz.5.174: attempt to access beyond end of device [ 47.855049][ T3915] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 47.874329][ T3918] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.175: corrupted in-inode xattr: invalid ea_ino [ 47.903189][ T3918] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.175: couldn't read orphan inode 15 (err -117) [ 47.927601][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.985808][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.032415][ T3938] syz.5.183[3938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.032513][ T3938] syz.5.183[3938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.058054][ T3938] syz.5.183[3938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.095384][ T3940] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 48.274610][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.301550][ T3376] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 48.425159][ T3957] process 'syz.3.192' launched '/dev/fd/3' with NULL argv: empty string added [ 48.598861][ T3973] loop1: detected capacity change from 0 to 128 [ 48.617391][ T3973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.629361][ T3973] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.643800][ T3973] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.766473][ T3991] pim6reg1: entered promiscuous mode [ 48.771840][ T3991] pim6reg1: entered allmulticast mode [ 48.787863][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.800501][ T3995] loop5: detected capacity change from 0 to 512 [ 48.812776][ T3993] Zero length message leads to an empty skb [ 48.823811][ T3995] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.835788][ T3997] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.846325][ T3995] EXT4-fs (loop5): mount failed [ 48.889299][ T4003] loop2: detected capacity change from 0 to 2048 [ 48.905802][ T4005] loop5: detected capacity change from 0 to 128 [ 48.921071][ T4003] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 48.936099][ T4003] System zones: 0-7 [ 48.940523][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.960770][ T4005] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 48.963534][ T4003] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.968840][ T4005] FAT-fs (loop5): Filesystem has been set read-only [ 48.986787][ T4009] loop3: detected capacity change from 0 to 256 [ 48.990498][ T4005] syz.5.214: attempt to access beyond end of device [ 48.990498][ T4005] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 49.010197][ T4005] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 49.010365][ T4003] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 49.018068][ T4005] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 49.038266][ T4003] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.038266][ T4003] [ 49.047954][ T4003] EXT4-fs (loop2): Total free blocks count 0 [ 49.053952][ T4003] EXT4-fs (loop2): Free/Dirty block details [ 49.059928][ T4003] EXT4-fs (loop2): free_blocks=2415919104 [ 49.065667][ T4003] EXT4-fs (loop2): dirty_blocks=16 [ 49.070807][ T4003] EXT4-fs (loop2): Block reservation details [ 49.076883][ T4003] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 49.086660][ T4005] syz.5.214: attempt to access beyond end of device [ 49.086660][ T4005] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.089916][ T4009] FAT-fs (loop3): Directory bread(block 1285) failed [ 49.099988][ T4005] syz.5.214: attempt to access beyond end of device [ 49.099988][ T4005] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.129996][ T4005] syz.5.214: attempt to access beyond end of device [ 49.129996][ T4005] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.169674][ T4009] FAT-fs (loop3): Directory bread(block 1285) failed [ 49.178001][ T4013] mmap: syz.0.216 (4013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.194974][ T4009] FAT-fs (loop3): Directory bread(block 1285) failed [ 49.216196][ T4009] FAT-fs (loop3): Directory bread(block 1285) failed [ 49.230590][ T4019] loop5: detected capacity change from 0 to 128 [ 49.247698][ T4020] FAT-fs (loop3): Directory bread(block 1285) failed [ 49.261646][ T4019] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.288933][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.306485][ T4019] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.322265][ T4025] IPv4: Oversized IP packet from 172.20.20.24 [ 49.328596][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 49.334882][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 49.343535][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 49.343553][ T29] audit: type=1400 audit(1733573372.829:471): avc: denied { setopt } for pid=4023 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.407102][ T29] audit: type=1400 audit(1733573372.899:472): avc: denied { cpu } for pid=4018 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.426513][ T4019] ref_ctr_offset mismatch. inode: 0xc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 49.438410][ T4034] IPv4: Oversized IP packet from 127.202.26.0 [ 49.444737][ T4033] serio: Serial port ttyS3 [ 49.572773][ T3716] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.656046][ T4052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.678754][ T4039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.696547][ T4039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.715180][ T4052] syz_tun: entered promiscuous mode [ 49.739618][ T4052] syz_tun: left promiscuous mode [ 49.762278][ T4056] pim6reg1: entered promiscuous mode [ 49.767823][ T4056] pim6reg1: entered allmulticast mode [ 49.794246][ T4064] loop1: detected capacity change from 0 to 2048 [ 49.804702][ T29] audit: type=1400 audit(1733573373.299:473): avc: denied { ioctl } for pid=4065 comm="syz.0.235" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.843270][ T4066] netlink: 'syz.0.235': attribute type 27 has an invalid length. [ 49.869608][ T4064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.959761][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.967091][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.119475][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.152551][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.218957][ T4066] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.227441][ T4066] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.235881][ T4066] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.244443][ T4066] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.382223][ T4087] syzkaller0: entered promiscuous mode [ 50.387899][ T4087] syzkaller0: entered allmulticast mode [ 50.463300][ T4076] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.502434][ T4093] loop3: detected capacity change from 0 to 128 [ 50.520256][ T4076] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 50.532723][ T4076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.532723][ T4076] [ 50.534715][ T4093] EXT4-fs: Ignoring removed nobh option [ 50.542604][ T4076] EXT4-fs (loop1): Total free blocks count 0 [ 50.542623][ T4076] EXT4-fs (loop1): Free/Dirty block details [ 50.560236][ T4076] EXT4-fs (loop1): free_blocks=2415919104 [ 50.566193][ T4076] EXT4-fs (loop1): dirty_blocks=8224 [ 50.571677][ T4076] EXT4-fs (loop1): Block reservation details [ 50.577706][ T4076] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 50.600133][ T4093] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.623020][ T4093] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.711362][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.762985][ T388] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 50.794110][ T4104] loop5: detected capacity change from 0 to 512 [ 50.799906][ T4107] loop3: detected capacity change from 0 to 512 [ 50.829037][ T4104] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.829537][ T29] audit: type=1326 audit(1733573374.319:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd264cbfed9 code=0x7ffc0000 [ 50.842129][ T4104] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.866137][ T4107] EXT4-fs: Ignoring removed oldalloc option [ 50.875254][ T29] audit: type=1326 audit(1733573374.319:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd264cbfed9 code=0x7ffc0000 [ 50.884577][ T29] audit: type=1326 audit(1733573374.359:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd264cbe98f code=0x7ffc0000 [ 50.928359][ T29] audit: type=1326 audit(1733573374.359:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd264cbfed9 code=0x7ffc0000 [ 50.951678][ T29] audit: type=1326 audit(1733573374.359:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd264cbfed9 code=0x7ffc0000 [ 50.980266][ T4107] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.028586][ T4107] EXT4-fs (loop3): 1 truncate cleaned up [ 51.034607][ T4107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.049387][ T29] audit: type=1400 audit(1733573374.539:479): avc: denied { mounton } for pid=4106 comm="syz.3.245" path="/55/bus/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.074634][ T4104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 51.074711][ T4104] System zones: 1-12 [ 51.138287][ T4119] loop1: detected capacity change from 0 to 256 [ 51.163058][ T4104] EXT4-fs (loop5): 1 truncate cleaned up [ 51.171925][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.184909][ T4104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.231284][ T4119] FAT-fs (loop1): Directory bread(block 64) failed [ 51.240837][ T4119] FAT-fs (loop1): Directory bread(block 65) failed [ 51.260234][ T4119] FAT-fs (loop1): Directory bread(block 66) failed [ 51.276183][ T4119] FAT-fs (loop1): Directory bread(block 67) failed [ 51.282843][ T29] audit: type=1326 audit(1733573374.769:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb517d6fed9 code=0x7ffc0000 [ 51.317812][ T4119] FAT-fs (loop1): Directory bread(block 68) failed [ 51.326106][ T4104] loop5: detected capacity change from 512 to 64 [ 51.336279][ T4127] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop5 ino=15 [ 51.337506][ T4119] FAT-fs (loop1): Directory bread(block 69) failed [ 51.345194][ T4127] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop5 ino=15 [ 51.353207][ T4119] FAT-fs (loop1): Directory bread(block 70) failed [ 51.369088][ T4119] FAT-fs (loop1): Directory bread(block 71) failed [ 51.395775][ T4119] FAT-fs (loop1): Directory bread(block 72) failed [ 51.407323][ T4127] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -12) [ 51.409073][ T4119] FAT-fs (loop1): Directory bread(block 73) failed [ 51.494245][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.540827][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.580341][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.602903][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.635119][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.668724][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.697315][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.727795][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.762934][ T3716] EXT4-fs warning (device loop5): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.822118][ T4144] hsr_slave_0: left promiscuous mode [ 51.843109][ T4144] hsr_slave_1: left promiscuous mode [ 52.017973][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.031340][ T330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.189415][ T330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.397099][ T330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.528999][ T330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.549628][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.558857][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.568906][ T4163] dummy0: entered promiscuous mode [ 52.575355][ T4163] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 52.614108][ T330] bridge_slave_1: left allmulticast mode [ 52.619838][ T330] bridge_slave_1: left promiscuous mode [ 52.625498][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.645924][ T330] bridge_slave_0: left allmulticast mode [ 52.651786][ T330] bridge_slave_0: left promiscuous mode [ 52.657525][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.702085][ T4169] loop1: detected capacity change from 0 to 512 [ 52.710484][ T4169] EXT4-fs (loop1): fragment/cluster size (2048) != block size (1024) [ 52.780431][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.790705][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.801415][ T330] bond0 (unregistering): Released all slaves [ 52.850446][ T330] hsr_slave_0: left promiscuous mode [ 52.861066][ T4174] loop1: detected capacity change from 0 to 1024 [ 52.867973][ T330] hsr_slave_1: left promiscuous mode [ 52.873678][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.881134][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.896434][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.903869][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.915586][ T330] veth1_macvtap: left promiscuous mode [ 52.919862][ T4178] loop3: detected capacity change from 0 to 512 [ 52.921127][ T330] veth0_macvtap: left promiscuous mode [ 52.932846][ T330] veth1_vlan: left promiscuous mode [ 52.938143][ T330] veth0_vlan: left promiscuous mode [ 52.946646][ T4174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.959181][ T4174] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.971043][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.983886][ T4178] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.049016][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.080139][ T330] team0 (unregistering): Port device team_slave_1 removed [ 53.095280][ T330] team0 (unregistering): Port device team_slave_0 removed [ 53.166678][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.249139][ T4198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.283'. [ 53.259177][ T4198] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072268027052) [ 53.269866][ T4198] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 53.291895][ T4151] chnl_net:caif_netlink_parms(): no params data found [ 53.328173][ T4193] wg2: entered promiscuous mode [ 53.333193][ T4193] wg2: entered allmulticast mode [ 53.410548][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.417699][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.424877][ T4151] bridge_slave_0: entered allmulticast mode [ 53.431688][ T4151] bridge_slave_0: entered promiscuous mode [ 53.438447][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.445524][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.452802][ T4151] bridge_slave_1: entered allmulticast mode [ 53.459285][ T4151] bridge_slave_1: entered promiscuous mode [ 53.498363][ T4151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.513525][ T4151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.620711][ T4151] team0: Port device team_slave_0 added [ 53.659968][ T4151] team0: Port device team_slave_1 added [ 53.735346][ T4151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.742516][ T4151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.768495][ T4151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.846145][ T4151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.853165][ T4151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.879138][ T4151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.943243][ T4237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.299'. [ 53.977981][ T4151] hsr_slave_0: entered promiscuous mode [ 53.984299][ T4151] hsr_slave_1: entered promiscuous mode [ 53.995500][ T4239] loop1: detected capacity change from 0 to 128 [ 54.066088][ T4151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.074756][ T4151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.083662][ T4151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.092870][ T4151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.108010][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.115202][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.122512][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.129740][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.163241][ T4151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.176066][ T1761] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.190759][ T1761] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.221886][ T4151] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.240607][ T1761] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.248091][ T1761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.297891][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.305064][ T1761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.375232][ T4247] syz.1.300: attempt to access beyond end of device [ 54.375232][ T4247] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.388699][ T4247] buffer_io_error: 3 callbacks suppressed [ 54.388729][ T4247] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 54.544351][ T4151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.660956][ T4271] vhci_hcd: invalid port number 157 [ 54.666433][ T4271] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 54.692648][ T4267] can: request_module (can-proto-0) failed. [ 54.763901][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 54.763919][ T29] audit: type=1400 audit(1733573378.249:599): avc: denied { setopt } for pid=4279 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.851710][ T4151] veth0_vlan: entered promiscuous mode [ 54.860077][ T4151] veth1_vlan: entered promiscuous mode [ 54.872860][ T4151] veth0_macvtap: entered promiscuous mode [ 54.880346][ T4151] veth1_macvtap: entered promiscuous mode [ 54.891031][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.901608][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.911562][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.922072][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.931957][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.942537][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.953140][ T4151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.975424][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.985925][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.995817][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.006356][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.016200][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.026767][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.056553][ T4151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.080084][ T4151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.088872][ T4151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.097744][ T4151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.106559][ T4151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.190950][ T4295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'. [ 55.244595][ T4297] xt_hashlimit: size too large, truncated to 1048576 [ 55.261678][ T29] audit: type=1400 audit(1733573378.749:600): avc: denied { listen } for pid=4294 comm="syz.2.314" lport=56382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.383131][ T29] audit: type=1400 audit(1733573378.799:601): avc: denied { accept } for pid=4294 comm="syz.2.314" lport=56382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.594257][ T4308] pim6reg1: entered promiscuous mode [ 55.599719][ T4308] pim6reg1: entered allmulticast mode [ 55.661327][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.693601][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.711073][ T4314] pim6reg1: entered promiscuous mode [ 55.716569][ T4314] pim6reg1: entered allmulticast mode [ 55.745807][ T4312] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.845879][ T29] audit: type=1400 audit(1733573379.329:602): avc: denied { append } for pid=4317 comm="+}[@" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.080042][ T29] audit: type=1400 audit(1733573379.569:603): avc: denied { setopt } for pid=4326 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.107913][ T4329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 56.116841][ T4329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 56.149660][ T4329] bridge0: entered promiscuous mode [ 56.155424][ T4329] bridge0: left promiscuous mode [ 56.178536][ T4331] loop1: detected capacity change from 0 to 512 [ 56.196069][ T4331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.223021][ T4331] EXT4-fs (loop1): 1 truncate cleaned up [ 56.237827][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.334527][ T4338] pim6reg1: entered promiscuous mode [ 56.339996][ T4338] pim6reg1: entered allmulticast mode [ 56.355558][ T29] audit: type=1400 audit(1733573379.839:604): avc: denied { unlink } for pid=4330 comm="syz.1.327" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.377496][ T4331] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.327: inode #1073372648: comm syz.1.327: iget: illegal inode # [ 56.377882][ T29] audit: type=1326 audit(1733573379.839:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4344 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb517d6fed9 code=0x7ffc0000 [ 56.413132][ T4331] EXT4-fs error (device loop1): ext4_xattr_inode_iget:445: comm syz.1.327: error while reading EA inode 1073372648 err=-117 [ 56.414704][ T29] audit: type=1326 audit(1733573379.839:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4344 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb517d6fed9 code=0x7ffc0000 [ 56.432967][ T4331] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.327: corrupted xattr block 33: invalid header [ 56.450829][ T29] audit: type=1326 audit(1733573379.839:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4344 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb517d6fed9 code=0x7ffc0000 [ 56.450868][ T29] audit: type=1326 audit(1733573379.839:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4344 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb517d6fed9 code=0x7ffc0000 [ 56.467764][ T4331] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 56.588779][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.616871][ T4359] loop3: detected capacity change from 0 to 128 [ 56.656785][ T4359] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.686256][ T4359] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.765185][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.778356][ T4357] syzkaller0: entered promiscuous mode [ 56.783934][ T4357] syzkaller0: entered allmulticast mode [ 56.966799][ T4388] loop3: detected capacity change from 0 to 512 [ 56.993867][ T4394] tipc: Started in network mode [ 56.998969][ T4394] tipc: Node identity 5e1518a012e9, cluster identity 4711 [ 57.006455][ T4394] tipc: Enabled bearer , priority 7 [ 57.017380][ T4394] ªªªªªª: renamed from syzkaller0 [ 57.025118][ T4394] tipc: Disabling bearer [ 57.026511][ T4395] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 57.026511][ T4395] program syz.6.350 not setting count and/or reply_len properly [ 57.050060][ T4388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.067127][ T4388] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.177726][ T4401] pim6reg1: entered promiscuous mode [ 57.183144][ T4401] pim6reg1: entered allmulticast mode [ 57.212030][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.282656][ T4411] loop3: detected capacity change from 0 to 512 [ 57.290366][ T4411] EXT4-fs: Ignoring removed orlov option [ 57.297927][ T4411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.312597][ T4411] EXT4-fs (loop3): 1 orphan inode deleted [ 57.318547][ T4411] EXT4-fs (loop3): 1 truncate cleaned up [ 57.326266][ T4411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.374535][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.461644][ T4419] loop3: detected capacity change from 0 to 512 [ 57.487517][ T4419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.540703][ T4419] EXT4-fs (loop3): 1 truncate cleaned up [ 57.651260][ T4425] loop2: detected capacity change from 0 to 512 [ 57.718615][ T4425] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.751755][ T4425] @: renamed from bond0 (while UP) [ 57.844169][ T4435] syz.2.366[4435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.856284][ T4435] loop2: detected capacity change from 0 to 128 [ 57.989303][ T4435] syz.2.366: attempt to access beyond end of device [ 57.989303][ T4435] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 58.044803][ T4434] syz.2.366: attempt to access beyond end of device [ 58.044803][ T4434] loop2: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 58.104843][ T4435] syz.2.366: attempt to access beyond end of device [ 58.104843][ T4435] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.151378][ T11] kworker/u8:0: attempt to access beyond end of device [ 58.151378][ T11] loop2: rw=1, sector=185, nr_sectors = 24 limit=128 [ 58.161070][ T4435] syz.2.366: attempt to access beyond end of device [ 58.161070][ T4435] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.209157][ T4435] syz.2.366: attempt to access beyond end of device [ 58.209157][ T4435] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.243979][ T4435] syz.2.366: attempt to access beyond end of device [ 58.243979][ T4435] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.318049][ T11] kworker/u8:0: attempt to access beyond end of device [ 58.318049][ T11] loop2: rw=1, sector=217, nr_sectors = 7 limit=128 [ 58.409296][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 58.421952][ T4440] xt_hashlimit: size too large, truncated to 1048576 [ 58.451542][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.459222][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.503296][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.510823][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.679590][ T4459] loop2: detected capacity change from 0 to 512 [ 58.694869][ T4459] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.931052][ T4419] syz.3.360 (4419) used greatest stack depth: 7184 bytes left [ 58.980307][ T4470] netlink: 100 bytes leftover after parsing attributes in process `syz.0.381'. [ 58.999919][ T4472] wireguard0: entered promiscuous mode [ 59.005466][ T4472] wireguard0: entered allmulticast mode [ 59.025233][ T4479] program syz.6.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.051498][ T4476] pim6reg1: entered promiscuous mode [ 59.056858][ T4476] pim6reg1: entered allmulticast mode [ 59.062485][ T4479] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 59.144173][ T4483] tipc: Enabled bearer , priority 7 [ 59.165949][ T4481] netlink: 256 bytes leftover after parsing attributes in process `syz.3.385'. [ 59.167203][ T4483] ªªªªªª: renamed from syzkaller0 [ 59.183526][ T4483] tipc: Disabling bearer [ 59.228506][ T4492] capability: warning: `syz.1.389' uses deprecated v2 capabilities in a way that may be insecure [ 59.264134][ T4490] loop2: detected capacity change from 0 to 128 [ 59.361645][ T4502] loop3: detected capacity change from 0 to 128 [ 59.366907][ T4503] loop1: detected capacity change from 0 to 128 [ 59.379813][ T4503] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.426378][ T4502] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.542555][ T4508] loop3: detected capacity change from 0 to 512 [ 59.545545][ T4506] syz.2.390: attempt to access beyond end of device [ 59.545545][ T4506] loop2: rw=2049, sector=156, nr_sectors = 8 limit=128 [ 59.561152][ T4510] loop1: detected capacity change from 0 to 128 [ 59.576358][ T4508] EXT4-fs: Ignoring removed orlov option [ 59.587650][ T4506] syz.2.390: attempt to access beyond end of device [ 59.587650][ T4506] loop2: rw=2049, sector=172, nr_sectors = 16 limit=128 [ 59.604984][ T4510] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.613118][ T4506] syz.2.390: attempt to access beyond end of device [ 59.613118][ T4506] loop2: rw=2049, sector=196, nr_sectors = 8 limit=128 [ 59.616119][ T4508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.629055][ T4506] syz.2.390: attempt to access beyond end of device [ 59.629055][ T4506] loop2: rw=2049, sector=220, nr_sectors = 8 limit=128 [ 59.650835][ T4506] syz.2.390: attempt to access beyond end of device [ 59.650835][ T4506] loop2: rw=2049, sector=236, nr_sectors = 8 limit=128 [ 59.664318][ T4506] syz.2.390: attempt to access beyond end of device [ 59.664318][ T4506] loop2: rw=2049, sector=252, nr_sectors = 8 limit=128 [ 59.677892][ T4506] syz.2.390: attempt to access beyond end of device [ 59.677892][ T4506] loop2: rw=2049, sector=268, nr_sectors = 8 limit=128 [ 59.692400][ T4506] syz.2.390: attempt to access beyond end of device [ 59.692400][ T4506] loop2: rw=2049, sector=292, nr_sectors = 8 limit=128 [ 59.706012][ T4506] syz.2.390: attempt to access beyond end of device [ 59.706012][ T4506] loop2: rw=2049, sector=332, nr_sectors = 8 limit=128 [ 59.714135][ T4508] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.719666][ T4506] syz.2.390: attempt to access beyond end of device [ 59.719666][ T4506] loop2: rw=2049, sector=348, nr_sectors = 8 limit=128 [ 59.778370][ T4508] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.396: bg 0: block 255: padding at end of block bitmap is not set [ 59.819049][ T4508] EXT4-fs (loop3): Remounting filesystem read-only [ 59.838188][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 59.838204][ T29] audit: type=1400 audit(1733573383.329:1074): avc: denied { create } for pid=4516 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.846882][ T4515] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 59.879004][ T4515] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 59.923790][ T29] audit: type=1400 audit(1733573383.329:1075): avc: denied { bind } for pid=4516 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.943296][ T29] audit: type=1400 audit(1733573383.329:1076): avc: denied { listen } for pid=4516 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.962996][ T29] audit: type=1400 audit(1733573383.329:1077): avc: denied { accept } for pid=4516 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.009432][ T29] audit: type=1400 audit(1733573383.489:1078): avc: denied { mounton } for pid=4507 comm="syz.3.396" path="/83/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.037401][ T139] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 60.067141][ T139] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 60.083080][ T29] audit: type=1400 audit(1733573383.569:1079): avc: denied { listen } for pid=4519 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.158779][ T4524] loop1: detected capacity change from 0 to 512 [ 60.193853][ T4527] @: renamed from vlan0 (while UP) [ 60.193852][ T29] audit: type=1400 audit(1733573383.679:1080): avc: denied { ioctl } for pid=4526 comm="syz.3.404" path="socket:[8654]" dev="sockfs" ino=8654 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.238693][ T4524] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.266374][ T4524] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.279509][ T4524] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 60.290087][ T4524] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.313804][ T4535] loop3: detected capacity change from 0 to 1024 [ 60.321362][ T4524] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 60.321888][ T4535] EXT4-fs: Ignoring removed oldalloc option [ 60.338098][ T4535] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 60.350839][ T4524] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.403: bg 0: block 40: padding at end of block bitmap is not set [ 60.375055][ T4543] loop6: detected capacity change from 0 to 128 [ 60.385012][ T4524] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 60.413407][ T4524] EXT4-fs (loop1): 1 truncate cleaned up [ 60.506301][ T4550] loop1: detected capacity change from 0 to 512 [ 60.551670][ T4550] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.755596][ T4564] loop2: detected capacity change from 0 to 512 [ 60.779070][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.807538][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.829568][ T4564] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.926746][ T4573] ================================================================== [ 60.934877][ T4573] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 60.941945][ T4573] [ 60.944277][ T4573] read-write to 0xffff888237c2e8a4 of 4 bytes by task 3444 on cpu 0: [ 60.952349][ T4573] wq_worker_running+0x98/0x130 [ 60.957210][ T4573] schedule_timeout+0xb8/0x160 [ 60.961989][ T4573] wait_for_common+0xfb/0x1c0 [ 60.966668][ T4573] usb_start_wait_urb+0xdc/0x190 [ 60.971611][ T4573] usb_control_msg+0x182/0x240 [ 60.976378][ T4573] hub_ext_port_status+0xbf/0x480 [ 60.981418][ T4573] hub_event+0x538/0x2910 [ 60.985751][ T4573] process_scheduled_works+0x483/0x9a0 [ 60.991215][ T4573] worker_thread+0x51d/0x6f0 [ 60.995811][ T4573] kthread+0x1d1/0x210 [ 60.999873][ T4573] ret_from_fork+0x4b/0x60 [ 61.004548][ T4573] ret_from_fork_asm+0x1a/0x30 [ 61.009311][ T4573] [ 61.011635][ T4573] read to 0xffff888237c2e8a4 of 4 bytes by task 4573 on cpu 1: [ 61.019190][ T4573] kick_pool+0x4d/0x2c0 [ 61.023350][ T4573] __queue_work+0x8bb/0xb40 [ 61.027859][ T4573] queue_work_on+0xd3/0x180 [ 61.032395][ T4573] wg_packet_send_staged_packets+0x83c/0xac0 [ 61.038395][ T4573] wg_xmit+0x5ca/0x6b0 [ 61.042467][ T4573] dev_hard_start_xmit+0x119/0x3f0 [ 61.047573][ T4573] __dev_queue_xmit+0x100a/0x2090 [ 61.052613][ T4573] neigh_connected_output+0x247/0x2b0 [ 61.057994][ T4573] ip_finish_output2+0x767/0x890 [ 61.062932][ T4573] ip_finish_output+0x11a/0x2a0 [ 61.067799][ T4573] ip_output+0xab/0x170 [ 61.071954][ T4573] ip_local_out+0xab/0xd0 [ 61.076288][ T4573] iptunnel_xmit+0x351/0x490 [ 61.080915][ T4573] ip_tunnel_xmit+0x1662/0x1720 [ 61.085772][ T4573] ipgre_xmit+0x5e6/0x6c0 [ 61.090125][ T4573] dev_hard_start_xmit+0x119/0x3f0 [ 61.095252][ T4573] __dev_queue_xmit+0x100a/0x2090 [ 61.100272][ T4573] __bpf_redirect+0x728/0x970 [ 61.104958][ T4573] bpf_clone_redirect+0x18a/0x200 [ 61.109991][ T4573] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x64 [ 61.115453][ T4573] bpf_test_run+0x1e5/0x4a0 [ 61.119954][ T4573] bpf_prog_test_run_skb+0x858/0xc00 [ 61.125249][ T4573] bpf_prog_test_run+0x20f/0x3a0 [ 61.130200][ T4573] __sys_bpf+0x400/0x7a0 [ 61.134438][ T4573] __x64_sys_bpf+0x43/0x50 [ 61.138879][ T4573] x64_sys_call+0x2914/0x2dc0 [ 61.143573][ T4573] do_syscall_64+0xc9/0x1c0 [ 61.148073][ T4573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.153979][ T4573] [ 61.156295][ T4573] value changed: 0x00000000 -> 0x00000001 [ 61.162017][ T4573] [ 61.164333][ T4573] Reported by Kernel Concurrency Sanitizer on: [ 61.170498][ T4573] CPU: 1 UID: 0 PID: 4573 Comm: syz.6.419 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 61.181080][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.191221][ T4573] ================================================================== [ 61.266448][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.293199][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.309344][ T4570] loop3: detected capacity change from 0 to 256 [ 61.332291][ T4570] FAT-fs (loop3): Directory bread(block 1285) failed [ 61.339965][ T4570] FAT-fs (loop3): Directory bread(block 1285) failed [ 61.346751][ T4570] FAT-fs (loop3): Directory bread(block 1285) failed [ 61.353470][ T4570] FAT-fs (loop3): Directory bread(block 1285) failed