last executing test programs: 6.868746745s ago: executing program 1 (id=302): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='trusted.overlay.nlink\x00') r1 = fsmount(r0, 0x0, 0x0) symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='@(\x00', &(0x7f00000005c0)='/dev/sg#\x00', 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09000000000000550901000000001e9500000000000000bf91000000000000b7020000000000008500000085000000b7bbd7001078000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r6, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 5.838913392s ago: executing program 1 (id=309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000002a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) lsm_set_self_attr(0x67, &(0x7f00000002c0)={0x65, 0x3, 0x4a, 0x2a, "5843f0b0136eed206679c80a652ca79829df7d9792b492b06bad1808759a19b11a97313e8be2dcceaf59"}, 0x4a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000002c0)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000240)=0x6, 0x4) modify_ldt$write(0x1, 0x0, 0x0) 5.795203001s ago: executing program 1 (id=311): setxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) 4.063190395s ago: executing program 3 (id=321): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) close(0x3) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b27c307998900002c00128107000000000000000000000005000d000000006a00100000feffff18fcdffcbf3326687013533ad7690ee31dbb160f6d6d857eba57291100ae5aed5cfe0cc0218e09c6962cdfd7f5e1e3600a9786e63627101aa8c00f65e9dbe84b485bad7d9cf4be16b5b7fb07d5059597376c724d5e3ea06d98ae3a0dda024c56d784c1650b2014037ab2d9b088ef0fe23800e1917d4a3b000000000000000000006d90596926a3cc2ae2df0ba7776cfb005613e1356a285502a3d6c866365925ffc15a6b09c31fa810a061db6391b8b370f8395416"], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x2008010) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x40010, r2, 0x62b1d000) socket(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 4.023631345s ago: executing program 4 (id=322): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x8a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0040040000c10000280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 3.949761165s ago: executing program 3 (id=323): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000099925c00"/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setresuid(0xee01, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000000000}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b130000000000000000000008000000000000007096ee04f3da7f9a1c4a5a26740193c1990b5f4c48bae2245a54f3ad1e0ff7842ef513b07c7018205277d23852b5eb98e3c73e2458fbd6fdcd9e3576fd94d8bc3199243dc200b98610c515bc", @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3.823966704s ago: executing program 1 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x52) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x2000000c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 3.804205524s ago: executing program 4 (id=325): socket$kcm(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x154, 0xf5ffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9302ce0ecd0c3027, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[], 0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x100, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.352958273s ago: executing program 0 (id=326): socket$kcm(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x154, 0xf5ffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9302ce0ecd0c3027, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[], 0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x100, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.017957082s ago: executing program 3 (id=328): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xd3, 0xf1, 0x8, @remote, @remote, 0x20, 0x40, 0x40, 0x400}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffa}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x48, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r8, 0x5608, 0x0) 2.886262851s ago: executing program 4 (id=329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 2.66926308s ago: executing program 4 (id=330): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000028008000b703000000009c8c850000006d000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fc_track_range\x00', r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x22040, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.55255348s ago: executing program 2 (id=331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46ee"], 0x208}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002062, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x84, 0x40000}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}, {{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/18, 0x12}], 0x1, &(0x7f00000005c0)=""/23, 0x17}, 0x100}, {{&(0x7f0000000600)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000008c0)=""/217, 0xd9}, 0x2}, {{&(0x7f00000007c0)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/144, 0x90}], 0x1, &(0x7f0000000b40)=""/154, 0x9a}, 0xa312}], 0x6, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) close(r5) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203"], 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x100, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x127}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) 2.501901989s ago: executing program 0 (id=332): setxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) 2.401709999s ago: executing program 2 (id=333): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x20081e, &(0x7f0000000000)={[{@auto_da_alloc}, {@dioread_lock}, {@auto_da_alloc}]}, 0xff, 0x4ef, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xa, &(0x7f0000000140)=[{0x100, 0x0, 0x1, 0xc}, {0x1, 0x10, 0x0, 0x5}, {0x6, 0x10, 0x5, 0x8}, {0x4, 0x3, 0x0, 0x80000001}, {0x81, 0x5, 0xd, 0x6}, {0x100, 0xae, 0x5d, 0xcaa0}, {0x6, 0x57, 0x0, 0xfffffff7}, {0x7, 0x6, 0x0, 0x81}, {0x9, 0x80, 0xfa, 0x4}, {0x6, 0xa, 0x57, 0x3ff}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="a3", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x20040001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa11200007"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 1.994309378s ago: executing program 0 (id=334): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc00"], 0xbc}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_setup(0x1, &(0x7f0000000340)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "f13d761700"}) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) syz_open_pts(r7, 0x0) r8 = epoll_create1(0x80000) epoll_pwait2(r8, &(0x7f00000015c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000001600), &(0x7f0000001640)={[0x5]}, 0x8) io_submit(r6, 0x4, &(0x7f0000001580)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000001240)="37e638044266a92756725e4cd64c1cd1c834e106b06f9cdd6e74746051d38017047408101e6b9dc86ee085c020b3d9b491da0f0e378a8b8e7f7bf948c8e378f42928c964f731766d113c6210f01d967f64514618f04c22f1e3d0cc117f7a6e944d4a8c0ae8d85a69d3d5a2aac5c8f2e51e229bc1b1a52ff19e8f85dfc2751ce430f0b8153c6784d5ea8d9e1664b30e3e51a0802f4a", 0x95, 0xce8, 0x0, 0x2}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000001300)="3ab241f2a55d15b1538342e45cb360faa40a3a0df1cf3b1d17ff05e4a76840886262d1978bada41f291d7439b18f60fff033c3dcffc22be86d1816d2", 0x3c, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000001380)="c23b23c457690fefa8995fa2c795f8c4751cd6c5383e44b955baaeee89909facb1a602b4aa32042a401950ff1ab6528ab92e00059ab0377f909cfeb47d64eab740af752a8a548695c72296bbebf776d9f9529ccef3fa62a62aa30bb31b76f338cf25bc7c8df0a00089080d94bcce5b", 0x6f, 0x5, 0x0, 0x2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0x4481, r0, &(0x7f0000001440)="ea32163799bcd761e2f3cc321ea95e9cf2853a34cb502e1c3e3d12a70340f61741de2a23227383ba53ef23f21d7459fd87476d5f77393793211ccb26c25d4d07319b6a198a59690ece659df0b088654cdc382a7495c9937efef534626ec12c2aa3cca0d8c8c97e34112a86c1ca57e615cc146332d80eebf34f9ee8ce42ea3832cd31447d480bbefa5fc9b5a26578e57958fae5c1463799db13c5e091457c1eab01af312eb9fb3fbf8e076f6c2bcd491089746ce5a3d1a3f6f852591fb3096f45439b3a7014b0adc07c96691de837833e438a1111fcffbb", 0xd7, 0x1d, 0x0, 0x2}]) 1.962729797s ago: executing program 3 (id=335): setxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) 1.587811796s ago: executing program 2 (id=336): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000040), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00qX$\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x10000, 0x14002, 0x80002, 0x3}, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1.262301545s ago: executing program 1 (id=337): setxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) 1.148031894s ago: executing program 4 (id=338): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='trusted.overlay.nlink\x00') r1 = fsmount(r0, 0x0, 0x0) symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='@(\x00', &(0x7f00000005c0)='/dev/sg#\x00', 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09000000000000550901000000001e9500000000000000bf91000000000000b7020000000000008500000085000000b7bbd7001078000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r6, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 1.146790744s ago: executing program 2 (id=339): socket$kcm(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x154, 0xf5ffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9302ce0ecd0c3027, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[], 0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x100, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.096571874s ago: executing program 3 (id=340): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000940)={[], [{@audit}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@flag='silent'}, {@fsname={'fsname', 0x3d, 'memory.events\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'smackfsroot'}}, {@subj_type={'subj_type', 0x3d, ')*-)'}}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xa4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x9) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x5c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 912.570683ms ago: executing program 0 (id=341): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='trusted.overlay.nlink\x00') r1 = fsmount(r0, 0x0, 0x0) symlinkat(0x0, r1, &(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(r1, &(0x7f0000000700)='./file0\x00', 0x511a83, 0x52abe154ad664f74) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='@(\x00', &(0x7f00000005c0)='/dev/sg#\x00', 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09000000000000550901000000001e9500000000000000bf91000000000000b7020000000000008500000085000000b7bbd7001078000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 883.136383ms ago: executing program 0 (id=342): socket$kcm(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x154, 0xf5ffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9302ce0ecd0c3027, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[], 0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x100, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 374.039222ms ago: executing program 1 (id=343): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000099925c00"/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setresuid(0xee01, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000000000}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b130000000000000000000008000000000000007096ee04f3da7f9a1c4a5a26740193c1990b5f4c48bae2245a54f3ad1e0ff7842ef513b07c7018205277d23852b5eb98e3c73e2458fbd6fdcd9e3576fd94d8bc3199243dc200b98610c515bc", @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 373.426662ms ago: executing program 3 (id=344): setxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) 373.014582ms ago: executing program 4 (id=345): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, './file0\x00'}) syz_io_uring_setup(0xe42, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18002000"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) 12.87051ms ago: executing program 2 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, 0x0, 0x0}, 0x20) getrandom(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000280)="064c73fdb4092067", &(0x7f00000002c0)=""/171, &(0x7f00000003c0)="27fa7bfb9946ee91be4b8fb9901b592930bb997d90bcde57e4269ac21bce729e71f59b", &(0x7f0000000440)="6377fa4e1c0ddeaed1556d3f350d23edd056f3a3d670a12d84cb", 0x5, r0, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002140)='sessionid\x00') sendfile(r5, r6, 0x0, 0x5) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x2}}, 0x10) sendmmsg$unix(r7, &(0x7f0000004400), 0x400000000000203, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1802408, &(0x7f00000022c0)={[{@delalloc}, {@dioread_lock}, {@errors_remount}, {@nogrpid}, {@nodioread_nolock}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@auto_da_alloc}], [{@smackfshat={'smackfshat', 0x3d, '\''}}]}, 0x1, 0x505, &(0x7f0000000b00)="$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") r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x100}}) 0s ago: executing program 0 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7f20, 0x7800, 0xcc, 0x9, {{0x1b, 0x4, 0x2, 0x1b, 0x6c, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @local, {[@cipso={0x86, 0x2f, 0x2, [{0x0, 0x9, "76a27a3f658bf5"}, {0x6, 0x7, "80e09f965d"}, {0x6, 0x7, "161f064e63"}, {0x2, 0x6, "a59dbaf9"}, {0x6, 0xc, "8eb2c07df826ab1eaef9"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x96, [@local]}, @timestamp={0x44, 0xc, 0xdd, 0x0, 0x1, [0x3, 0x1]}, @ssrr={0x89, 0xf, 0x87, [@multicast1, @broadcast, @multicast2]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = accept4(r0, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x800) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800c2010}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffa}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\'\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): [ 18.660389][ T29] audit: type=1400 audit(1737834853.108:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 21.768969][ T29] audit: type=1400 audit(1737834856.218:82): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.769816][ T3283] cgroup: Unknown subsys name 'net' [ 21.791751][ T29] audit: type=1400 audit(1737834856.218:83): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.819124][ T29] audit: type=1400 audit(1737834856.248:84): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.935243][ T3283] cgroup: Unknown subsys name 'cpuset' [ 21.941257][ T3283] cgroup: Unknown subsys name 'rlimit' [ 22.039464][ T29] audit: type=1400 audit(1737834856.488:85): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.062935][ T29] audit: type=1400 audit(1737834856.488:86): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.068689][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.083405][ T29] audit: type=1400 audit(1737834856.488:87): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.112313][ T29] audit: type=1400 audit(1737834856.488:88): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.132623][ T29] audit: type=1400 audit(1737834856.488:89): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.157465][ T29] audit: type=1400 audit(1737834856.488:90): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.180756][ T29] audit: type=1400 audit(1737834856.548:91): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.209552][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.220801][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 23.309627][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.316802][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.324015][ T3299] bridge_slave_0: entered allmulticast mode [ 23.330468][ T3299] bridge_slave_0: entered promiscuous mode [ 23.338576][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.345642][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.352920][ T3299] bridge_slave_1: entered allmulticast mode [ 23.359272][ T3299] bridge_slave_1: entered promiscuous mode [ 23.365473][ T3295] chnl_net:caif_netlink_parms(): no params data found [ 23.377936][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 23.394805][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 23.415043][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.447077][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.465628][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.497520][ T3299] team0: Port device team_slave_0 added [ 23.506228][ T3299] team0: Port device team_slave_1 added [ 23.531463][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.538567][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.546076][ T3295] bridge_slave_0: entered allmulticast mode [ 23.552556][ T3295] bridge_slave_0: entered promiscuous mode [ 23.570950][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.578071][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.585308][ T3295] bridge_slave_1: entered allmulticast mode [ 23.591649][ T3295] bridge_slave_1: entered promiscuous mode [ 23.598108][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.605213][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.612545][ T3303] bridge_slave_0: entered allmulticast mode [ 23.618933][ T3303] bridge_slave_0: entered promiscuous mode [ 23.636173][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.643134][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.669129][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.688472][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.695623][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.702805][ T3303] bridge_slave_1: entered allmulticast mode [ 23.709340][ T3303] bridge_slave_1: entered promiscuous mode [ 23.719987][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.727071][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.734830][ T3296] bridge_slave_0: entered allmulticast mode [ 23.741177][ T3296] bridge_slave_0: entered promiscuous mode [ 23.752325][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.759311][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.785245][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.796777][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.812574][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.819807][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.826932][ T3296] bridge_slave_1: entered allmulticast mode [ 23.833442][ T3296] bridge_slave_1: entered promiscuous mode [ 23.839677][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.846820][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.853913][ T3305] bridge_slave_0: entered allmulticast mode [ 23.860217][ T3305] bridge_slave_0: entered promiscuous mode [ 23.867280][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.874322][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.881437][ T3305] bridge_slave_1: entered allmulticast mode [ 23.887858][ T3305] bridge_slave_1: entered promiscuous mode [ 23.894901][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.922828][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.948206][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.958167][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.972397][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.982177][ T3295] team0: Port device team_slave_0 added [ 23.993021][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.003997][ T3299] hsr_slave_0: entered promiscuous mode [ 24.009897][ T3299] hsr_slave_1: entered promiscuous mode [ 24.016806][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.030526][ T3295] team0: Port device team_slave_1 added [ 24.059920][ T3303] team0: Port device team_slave_0 added [ 24.066320][ T3296] team0: Port device team_slave_0 added [ 24.077036][ T3305] team0: Port device team_slave_0 added [ 24.087348][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.094333][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.120354][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.131452][ T3303] team0: Port device team_slave_1 added [ 24.142505][ T3296] team0: Port device team_slave_1 added [ 24.148780][ T3305] team0: Port device team_slave_1 added [ 24.156398][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.163337][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.189302][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.203819][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.210831][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.236868][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.268307][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.275279][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.301247][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.323051][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.330087][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.356107][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.367690][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.374807][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.400710][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.413622][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.420614][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.446596][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.465304][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.472247][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.498165][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.540334][ T3305] hsr_slave_0: entered promiscuous mode [ 24.546324][ T3305] hsr_slave_1: entered promiscuous mode [ 24.551995][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.559716][ T3305] Cannot create hsr debugfs directory [ 24.571186][ T3295] hsr_slave_0: entered promiscuous mode [ 24.577089][ T3295] hsr_slave_1: entered promiscuous mode [ 24.582813][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.590418][ T3295] Cannot create hsr debugfs directory [ 24.610927][ T3303] hsr_slave_0: entered promiscuous mode [ 24.616895][ T3303] hsr_slave_1: entered promiscuous mode [ 24.622640][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.630221][ T3303] Cannot create hsr debugfs directory [ 24.646509][ T3296] hsr_slave_0: entered promiscuous mode [ 24.652384][ T3296] hsr_slave_1: entered promiscuous mode [ 24.658393][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.665964][ T3296] Cannot create hsr debugfs directory [ 24.743889][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.763923][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.787267][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.813612][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.859187][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.868145][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.879086][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.887359][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.922007][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.930812][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.941792][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.955797][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.964018][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.975379][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.993114][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.002143][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.027441][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.036173][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.045435][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.054089][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.064797][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.095373][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.110232][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.117337][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.126182][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.133267][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.161543][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.183356][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.207443][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.214497][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.234158][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.241240][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.258596][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.269571][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.289931][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.303781][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.326235][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.334152][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.341213][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.362252][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.375375][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.382427][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.393375][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.408441][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.422933][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.433366][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.447431][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.467593][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.474807][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.489499][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.496629][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.517214][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.527667][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.548517][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.555730][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.573947][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.581111][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.616266][ T3299] veth0_vlan: entered promiscuous mode [ 25.631039][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.645327][ T3295] veth0_vlan: entered promiscuous mode [ 25.653049][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.661829][ T3299] veth1_vlan: entered promiscuous mode [ 25.673133][ T3295] veth1_vlan: entered promiscuous mode [ 25.692272][ T3299] veth0_macvtap: entered promiscuous mode [ 25.701894][ T3299] veth1_macvtap: entered promiscuous mode [ 25.712810][ T3295] veth0_macvtap: entered promiscuous mode [ 25.722372][ T3295] veth1_macvtap: entered promiscuous mode [ 25.749030][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.762155][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.772668][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.783414][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.794192][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.806423][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.823534][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.834111][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.845740][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.857842][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.866650][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.875559][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.884257][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.907496][ T3295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.916306][ T3295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.925079][ T3295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.933849][ T3295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.957365][ T3296] veth0_vlan: entered promiscuous mode [ 25.971251][ T3296] veth1_vlan: entered promiscuous mode [ 25.996420][ T3305] veth0_vlan: entered promiscuous mode [ 26.006971][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.007112][ T3296] veth0_macvtap: entered promiscuous mode [ 26.031489][ T3296] veth1_macvtap: entered promiscuous mode [ 26.050007][ T3305] veth1_vlan: entered promiscuous mode [ 26.050964][ T3430] loop1: detected capacity change from 0 to 1024 [ 26.063250][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.073805][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.080020][ T3433] loop0: detected capacity change from 0 to 128 [ 26.083646][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.096459][ T3433] EXT4-fs: Ignoring removed nobh option [ 26.100281][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.116502][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.123846][ T3430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.147672][ T3433] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 26.148878][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.165607][ T3433] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.170154][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.181952][ T3430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.189969][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.189985][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.226311][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.242421][ T3296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.251331][ T3296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.260089][ T3296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.268910][ T3296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.279937][ T3305] veth0_macvtap: entered promiscuous mode [ 26.287410][ T3305] veth1_macvtap: entered promiscuous mode [ 26.296617][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.307113][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.316957][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.327415][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.337252][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.347684][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.361572][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.370023][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.380563][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.390446][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.400990][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.410828][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.410842][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.419951][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.451261][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.460069][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.468862][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.477569][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.513896][ T3444] syz.1.2 (3444) used greatest stack depth: 10496 bytes left [ 26.513972][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 26.555924][ T3303] veth0_vlan: entered promiscuous mode [ 26.570884][ T3446] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 26.571049][ T3303] veth1_vlan: entered promiscuous mode [ 26.578660][ T3446] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 26.615306][ T3303] veth0_macvtap: entered promiscuous mode [ 26.633386][ T3303] veth1_macvtap: entered promiscuous mode [ 26.642918][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.653588][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.663426][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.673896][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.683730][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.694206][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.704110][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.714558][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.728985][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.760684][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.771205][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.781033][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.791598][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.801523][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.812050][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.821910][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.832449][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.844386][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.853956][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 26.853968][ T29] audit: type=1400 audit(1737834861.298:145): avc: denied { create } for pid=3451 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.854352][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.888007][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.896910][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.905687][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.917912][ T29] audit: type=1400 audit(1737834861.368:146): avc: denied { append } for pid=3449 comm="syz.3.4" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 26.941315][ T29] audit: type=1400 audit(1737834861.368:147): avc: denied { open } for pid=3449 comm="syz.3.4" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 26.964984][ T29] audit: type=1400 audit(1737834861.368:148): avc: denied { ioctl } for pid=3449 comm="syz.3.4" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 27.015404][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.021555][ T29] audit: type=1400 audit(1737834861.468:149): avc: denied { map } for pid=3454 comm="syz.2.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.048181][ T29] audit: type=1400 audit(1737834861.468:150): avc: denied { read write } for pid=3454 comm="syz.2.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.096136][ T29] audit: type=1326 audit(1737834861.528:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae60cd29 code=0x7ffc0000 [ 27.119253][ T29] audit: type=1326 audit(1737834861.528:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae60cd29 code=0x7ffc0000 [ 27.142339][ T29] audit: type=1326 audit(1737834861.528:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae60cd29 code=0x7ffc0000 [ 27.165415][ T29] audit: type=1326 audit(1737834861.528:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae60cd29 code=0x7ffc0000 [ 27.321827][ T3468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3468 comm=syz.0.9 [ 27.334221][ T3468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3468 comm=syz.0.9 [ 27.404797][ T3468] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 27.488494][ T3462] loop0: detected capacity change from 0 to 128 [ 27.684431][ T3472] tipc: Started in network mode [ 27.689432][ T3472] tipc: Node identity ac14140f, cluster identity 4711 [ 27.697684][ T3472] tipc: New replicast peer: 10.1.1.2 [ 27.703050][ T3472] tipc: Enabled bearer , priority 10 [ 27.733862][ T3469] geneve2: entered promiscuous mode [ 27.739368][ T3469] geneve2: entered allmulticast mode [ 27.860441][ T3484] process 'syz.1.14' launched './file1' with NULL argv: empty string added [ 27.980383][ T3490] loop2: detected capacity change from 0 to 128 [ 28.033853][ T3490] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.081210][ T3490] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.152728][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 28.161607][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 28.281008][ T3305] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory block failed checksum [ 28.394882][ T3488] Set syz1 is full, maxelem 65536 reached [ 28.409078][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.453601][ T3371] IPVS: starting estimator thread 0... [ 28.544701][ T3495] IPVS: using max 2784 ests per chain, 139200 per kthread [ 28.562985][ T3497] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.787205][ T3507] loop1: detected capacity change from 0 to 256 [ 28.807354][ T3507] syz.1.21 (3507) used greatest stack depth: 10072 bytes left [ 28.814694][ T3371] tipc: Node number set to 2886997007 [ 28.896375][ T3517] loop4: detected capacity change from 0 to 512 [ 28.903869][ T3517] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.910874][ T3517] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 28.923434][ T3517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 28.941337][ T3517] System zones: 1-12 [ 28.949283][ T3517] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.24: corrupted in-inode xattr: e_value size too large [ 28.971443][ T3517] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.24: couldn't read orphan inode 15 (err -117) [ 28.991113][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.996872][ T3522] loop3: detected capacity change from 0 to 512 [ 29.013193][ T3517] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 29.020772][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 29.027000][ T3522] EXT4-fs: Ignoring removed i_version option [ 29.041303][ T3522] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.069790][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.102062][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.115274][ T3522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.141318][ T3527] loop2: detected capacity change from 0 to 512 [ 29.177233][ T3527] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.25: corrupted in-inode xattr: invalid ea_ino [ 29.191553][ T3527] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.25: couldn't read orphan inode 15 (err -117) [ 29.207909][ T3527] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.247198][ T3522] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.327241][ T3522] EXT4-fs (loop3): 1 truncate cleaned up [ 29.346686][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 29.356337][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.471934][ T3539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 29.573874][ T3539] loop0: detected capacity change from 0 to 512 [ 29.620168][ T3539] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.056352][ T3539] EXT4-fs (loop0): 1 truncate cleaned up [ 30.062859][ T3539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.844188][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.853836][ T3305] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 30.915874][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.722282][ T3583] netlink: 'syz.1.40': attribute type 13 has an invalid length. [ 31.780928][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.788197][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.858983][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.872489][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.898210][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 31.898223][ T29] audit: type=1326 audit(1737834866.348:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 31.938678][ T3592] capability: warning: `syz.3.43' uses deprecated v2 capabilities in a way that may be insecure [ 31.981928][ T29] audit: type=1326 audit(1737834866.378:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.005159][ T29] audit: type=1326 audit(1737834866.378:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.028385][ T29] audit: type=1326 audit(1737834866.378:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.051531][ T29] audit: type=1326 audit(1737834866.378:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.074716][ T29] audit: type=1326 audit(1737834866.378:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.084048][ T3595] loop4: detected capacity change from 0 to 8192 [ 32.097844][ T29] audit: type=1326 audit(1737834866.378:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.127445][ T29] audit: type=1326 audit(1737834866.378:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.151015][ T29] audit: type=1326 audit(1737834866.378:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.174295][ T29] audit: type=1326 audit(1737834866.378:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 32.207997][ T3592] loop3: detected capacity change from 0 to 512 [ 32.225846][ T3583] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.234763][ T3583] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.243646][ T3583] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.252610][ T3583] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.276374][ T3595] loop4: p1 p2 p3 [ 32.281062][ T3595] loop4: p1 start 51379968 is beyond EOD, truncated [ 32.333073][ T3592] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.43: Failed to acquire dquot type 1 [ 32.345529][ T3595] loop4: p3 size 100663552 extends beyond EOD, truncated [ 32.353180][ T3592] EXT4-fs (loop3): 1 truncate cleaned up [ 32.361411][ T3592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.374443][ T3592] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.387813][ T2998] loop4: p1 p2 p3 [ 32.391642][ T2998] loop4: p1 start 51379968 is beyond EOD, truncated [ 32.399063][ T2998] loop4: p3 size 100663552 extends beyond EOD, truncated [ 32.430695][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.467684][ T3601] loop1: detected capacity change from 0 to 512 [ 32.515014][ T3601] EXT4-fs: Ignoring removed nobh option [ 32.522967][ T3605] loop3: detected capacity change from 0 to 128 [ 32.532164][ T3601] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.558059][ T3607] loop4: detected capacity change from 0 to 512 [ 32.565407][ T3601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.579124][ T3442] udevd[3442]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 32.579200][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 32.586479][ T3605] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 32.612452][ T3607] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 32.628531][ T3607] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 32.647236][ T3607] EXT4-fs (loop4): 1 truncate cleaned up [ 32.653382][ T3601] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.45: Failed to acquire dquot type 1 [ 32.679935][ T3607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.712221][ T3601] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.45: bg 0: block 40: padding at end of block bitmap is not set [ 32.737307][ T3601] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 32.747776][ T3601] EXT4-fs (loop1): 1 truncate cleaned up [ 32.754363][ T3601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.804081][ T3601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.822443][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.849460][ T3611] loop2: detected capacity change from 0 to 4096 [ 32.857974][ T3611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.012221][ T3620] syz.0.52 (3620) used greatest stack depth: 9448 bytes left [ 33.036953][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.065699][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.170893][ T3624] loop2: detected capacity change from 0 to 8192 [ 33.231490][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 33.257602][ T3624] loop2: p1 p2 p3 [ 33.275058][ T3624] loop2: p1 start 51379968 is beyond EOD, truncated [ 33.294776][ T3624] loop2: p3 size 100663552 extends beyond EOD, truncated [ 33.404653][ T3629] infiniband syz!: set active [ 33.409387][ T3629] infiniband syz!: added team_slave_0 [ 33.444036][ T3629] RDS/IB: syz!: added [ 33.453605][ T3629] smc: adding ib device syz! with port count 1 [ 33.467927][ T3629] smc: ib device syz! port 1 has pnetid [ 33.985460][ T3638] lo speed is unknown, defaulting to 1000 [ 33.991253][ T3638] lo speed is unknown, defaulting to 1000 [ 33.997183][ T3638] lo speed is unknown, defaulting to 1000 [ 34.003963][ T3638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 34.034313][ T3638] lo speed is unknown, defaulting to 1000 [ 34.037922][ T3646] loop7: detected capacity change from 0 to 16384 [ 34.045872][ T3638] lo speed is unknown, defaulting to 1000 [ 34.062943][ T3638] lo speed is unknown, defaulting to 1000 [ 34.084989][ T3638] lo speed is unknown, defaulting to 1000 [ 34.091082][ T3638] lo speed is unknown, defaulting to 1000 [ 34.107361][ T3638] lo speed is unknown, defaulting to 1000 [ 34.126003][ T3644] loop1: detected capacity change from 0 to 8192 [ 34.271631][ T3650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.60'. [ 34.274661][ T3647] loop7: detected capacity change from 16384 to 16383 [ 34.280752][ T3650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.60'. [ 34.295182][ T3646] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 0 [ 34.307634][ T3647] I/O error, dev loop7, sector 6400 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 34.317695][ T3647] Buffer I/O error on dev loop7, logical block 800, lost async page write [ 34.326309][ T3647] Buffer I/O error on dev loop7, logical block 801, lost async page write [ 34.327738][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 34.334847][ T3647] Buffer I/O error on dev loop7, logical block 802, lost async page write [ 34.352082][ T3647] Buffer I/O error on dev loop7, logical block 803, lost async page write [ 34.359338][ T3646] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 0 [ 34.360662][ T3647] Buffer I/O error on dev loop7, logical block 804, lost async page write [ 34.379136][ T3647] Buffer I/O error on dev loop7, logical block 805, lost async page write [ 34.387680][ T3647] Buffer I/O error on dev loop7, logical block 806, lost async page write [ 34.396263][ T3647] Buffer I/O error on dev loop7, logical block 807, lost async page write [ 34.404849][ T3647] Buffer I/O error on dev loop7, logical block 808, lost async page write [ 34.413366][ T3647] Buffer I/O error on dev loop7, logical block 809, lost async page write [ 34.442544][ T3646] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.448666][ T3656] xt_CT: No such helper "snmp_trap" [ 34.456033][ T3647] I/O error, dev loop7, sector 7424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 34.473838][ T3655] serio: Serial port ptm0 [ 34.515524][ T3659] loop3: detected capacity change from 0 to 512 [ 34.527376][ T3647] I/O error, dev loop7, sector 8448 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 34.539063][ T3659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.542105][ T3660] netlink: 76 bytes leftover after parsing attributes in process `syz.0.62'. [ 34.576536][ T3647] I/O error, dev loop7, sector 9472 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 34.592210][ T3647] I/O error, dev loop7, sector 10496 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 34.621932][ T3647] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.631505][ T3647] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.640810][ T3647] loop7: unable to read partition table [ 34.641147][ T3659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.659203][ T3659] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.666170][ T3664] sit0: entered promiscuous mode [ 34.675120][ T3664] sit0: entered allmulticast mode [ 34.682531][ T3647] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 34.697929][ C1] hrtimer: interrupt took 37023 ns [ 34.820513][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.863351][ T3670] loop2: detected capacity change from 0 to 164 [ 34.884398][ T3670] ======================================================= [ 34.884398][ T3670] WARNING: The mand mount option has been deprecated and [ 34.884398][ T3670] and is ignored by this kernel. Remove the mand [ 34.884398][ T3670] option from the mount to silence this warning. [ 34.884398][ T3670] ======================================================= [ 34.936657][ T3670] Unable to read rock-ridge attributes [ 34.955253][ T3670] Unable to read rock-ridge attributes [ 34.967590][ T3670] mmap: syz.2.66 (3670) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.073635][ T3673] netlink: 'syz.2.67': attribute type 27 has an invalid length. [ 35.152409][ T3674] tmpfs: Bad value for 'mpol' [ 35.232631][ T3676] loop2: detected capacity change from 0 to 1024 [ 35.296479][ T3676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.359445][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.366635][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.367077][ T3676] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.426872][ T3688] loop1: detected capacity change from 0 to 1024 [ 35.433538][ T3688] EXT4-fs: test_dummy_encryption option not supported [ 35.474122][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 35.483018][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 35.491911][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 35.523858][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.533739][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.560113][ T3673] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.569250][ T3673] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.578533][ T3673] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.587620][ T3673] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.620194][ T3684] veth0_to_team: entered promiscuous mode [ 35.626165][ T3684] veth0_to_team: entered allmulticast mode [ 35.677345][ T3674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.686750][ T3674] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.726903][ T3674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.814392][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.955797][ T3703] loop2: detected capacity change from 0 to 512 [ 36.041485][ T3703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.083699][ T3703] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.112048][ T3703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.322491][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 36.353942][ T3718] futex_wake_op: syz.2.78 tries to shift op by -1; fix this program [ 36.591728][ T3730] tipc: Started in network mode [ 36.596656][ T3730] tipc: Node identity ac14140f, cluster identity 4711 [ 36.653953][ T3730] tipc: New replicast peer: 255.255.255.255 [ 36.660165][ T3730] tipc: Enabled bearer , priority 10 [ 36.685201][ T3732] loop2: detected capacity change from 0 to 1024 [ 36.692047][ T3732] EXT4-fs: Ignoring removed orlov option [ 36.697986][ T3732] EXT4-fs: Ignoring removed orlov option [ 36.703673][ T3732] EXT4-fs: Ignoring removed oldalloc option [ 36.724275][ T3732] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.735284][ T3732] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 36.761676][ T3732] EXT4-fs (loop2): invalid journal inode [ 36.764450][ T3736] loop0: detected capacity change from 0 to 2048 [ 36.767872][ T3732] EXT4-fs (loop2): can't get journal size [ 36.788511][ T3732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.828121][ T3740] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.841570][ T3740] xt_hashlimit: max too large, truncated to 1048576 [ 36.850219][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.859448][ T3744] loop4: detected capacity change from 0 to 512 [ 36.869026][ T3740] Cannot find set identified by id 0 to match [ 36.871998][ T3744] EXT4-fs: inline encryption not supported [ 36.896674][ T3744] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 36.906262][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 36.906273][ T29] audit: type=1326 audit(1737834871.348:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 36.937070][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.025087][ T29] audit: type=1326 audit(1737834871.358:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 37.048317][ T29] audit: type=1326 audit(1737834871.358:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 37.071446][ T29] audit: type=1326 audit(1737834871.428:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 37.094674][ T29] audit: type=1326 audit(1737834871.428:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93a705cd63 code=0x7ffc0000 [ 37.117682][ T29] audit: type=1326 audit(1737834871.428:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93a705b7df code=0x7ffc0000 [ 37.140669][ T29] audit: type=1326 audit(1737834871.438:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 37.163853][ T29] audit: type=1326 audit(1737834871.438:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 37.163876][ T29] audit: type=1326 audit(1737834871.438:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f93a705cdb7 code=0x7ffc0000 [ 37.163895][ T29] audit: type=1326 audit(1737834871.438:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a705b690 code=0x7ffc0000 [ 37.184634][ T3740] lo speed is unknown, defaulting to 1000 [ 37.184656][ T3740] lo speed is unknown, defaulting to 1000 [ 37.184865][ T3740] lo speed is unknown, defaulting to 1000 [ 37.185777][ T3740] infiniband @ݍ: RDMA CMA: cma_listen_on_dev, error -98 [ 37.189475][ T3740] lo speed is unknown, defaulting to 1000 [ 37.189853][ T3740] lo speed is unknown, defaulting to 1000 [ 37.190238][ T3740] lo speed is unknown, defaulting to 1000 [ 37.190543][ T3740] lo speed is unknown, defaulting to 1000 [ 37.190919][ T3740] lo speed is unknown, defaulting to 1000 [ 37.191225][ T3740] lo speed is unknown, defaulting to 1000 [ 37.191523][ T3740] lo speed is unknown, defaulting to 1000 [ 37.231292][ T3740] syzkaller0: entered allmulticast mode [ 37.356378][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 37.356421][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.356447][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.366560][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.366633][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.676893][ T3373] tipc: Node number set to 2886997007 [ 37.763050][ T3763] loop3: detected capacity change from 0 to 512 [ 37.791976][ T3766] loop1: detected capacity change from 0 to 512 [ 37.792973][ T3766] EXT4-fs (loop1): can't mount with commit=4, fs mounted w/o journal [ 37.802848][ T3766] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 37.863102][ T3766] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 37.876821][ T3764] loop4: detected capacity change from 0 to 8192 [ 37.882901][ T3766] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 38.014481][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.086376][ T3771] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 38.094625][ T3771] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 38.200159][ T3780] loop1: detected capacity change from 0 to 512 [ 38.217647][ T3781] loop0: detected capacity change from 0 to 512 [ 38.243219][ T3781] EXT4-fs: Ignoring removed i_version option [ 38.252568][ T3780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.281479][ T3781] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.296523][ T3780] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.311060][ T3781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 38.329441][ T3781] System zones: 1-12 [ 38.341271][ T3781] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.349544][ T3780] netlink: 'syz.1.94': attribute type 6 has an invalid length. [ 38.358046][ T3781] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.92: invalid indirect mapped block 12 (level 1) [ 38.379817][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.384678][ T3781] EXT4-fs (loop0): Remounting filesystem read-only [ 38.421095][ T3781] EXT4-fs (loop0): 1 truncate cleaned up [ 38.425247][ T3786] loop1: detected capacity change from 0 to 512 [ 38.446532][ T3781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 38.474646][ T3781] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 38.485116][ T3781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 38.496874][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.543822][ T3786] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.673952][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 38.708070][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 39.087081][ T3800] loop0: detected capacity change from 0 to 2048 [ 39.127002][ T3800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.218259][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.285961][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.307403][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.314989][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.322541][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 39.329974][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.337406][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.346076][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.353464][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.361828][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.369299][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.376800][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.384222][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.391671][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.399096][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.406517][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.413988][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.421414][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.428836][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.436258][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.443652][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.450316][ T3817] loop1: detected capacity change from 0 to 512 [ 39.451110][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.464745][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.472131][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.479544][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.486610][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.486988][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.506893][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.514279][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.521687][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.524895][ T3817] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.529132][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.546728][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.554120][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.561532][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.568927][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.572034][ T3817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.576329][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.576353][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.600134][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.607535][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.615045][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.622435][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.629861][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.637279][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.644690][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.654758][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 39.658543][ T3814] loop4: detected capacity change from 0 to 512 [ 40.839400][ T3849] loop0: detected capacity change from 0 to 2048 [ 40.883541][ T3849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.907720][ T3849] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.109'. [ 41.002372][ T3854] lo speed is unknown, defaulting to 1000 [ 41.804163][ T3857] loop1: detected capacity change from 0 to 512 [ 41.869947][ T3860] loop3: detected capacity change from 0 to 512 [ 42.332176][ T3866] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 42.340481][ T3866] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 42.376164][ T3868] Zero length message leads to an empty skb [ 42.424700][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 42.424714][ T29] audit: type=1326 audit(1737834876.818:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.454365][ T29] audit: type=1326 audit(1737834876.818:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.477768][ T29] audit: type=1326 audit(1737834876.818:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.501188][ T29] audit: type=1326 audit(1737834876.818:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.524532][ T29] audit: type=1326 audit(1737834876.818:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.548006][ T29] audit: type=1326 audit(1737834876.818:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.571377][ T29] audit: type=1326 audit(1737834876.818:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f32a2bfb597 code=0x7ffc0000 [ 42.594688][ T29] audit: type=1326 audit(1737834876.818:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.618112][ T29] audit: type=1326 audit(1737834876.818:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.641507][ T29] audit: type=1326 audit(1737834876.818:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 42.676141][ T3853] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 42.723391][ T3857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.739596][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.750722][ T3860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.773262][ T3860] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.805540][ T3857] EXT4-fs (loop1): 1 truncate cleaned up [ 42.812829][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.862777][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 42.871691][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 42.896762][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.912683][ T3878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 42.929015][ T3883] Cannot find del_set index 0 as target [ 42.940389][ T3860] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.115: corrupted inode contents [ 42.943558][ T3878] bridge_slave_1: left allmulticast mode [ 42.957809][ T3878] bridge_slave_1: left promiscuous mode [ 42.963519][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.970968][ T3860] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.115: mark_inode_dirty error [ 42.974417][ T3885] loop1: detected capacity change from 0 to 512 [ 42.983212][ T3860] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.115: Allocating blocks 18-19 which overlap fs metadata [ 43.005444][ T3878] bridge_slave_0: left allmulticast mode [ 43.005688][ T3883] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.115: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 43.011137][ T3878] bridge_slave_0: left promiscuous mode [ 43.036463][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.058329][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.081110][ T3885] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.106760][ T3870] lo speed is unknown, defaulting to 1000 [ 43.113760][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.136956][ T3885] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.121: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 43.187395][ T3885] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 43.201622][ T3885] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.121: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 43.227809][ T3895] loop2: detected capacity change from 0 to 1024 [ 43.250480][ T3895] EXT4-fs: Ignoring removed nobh option [ 43.256135][ T3895] EXT4-fs: Ignoring removed bh option [ 43.292586][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.292915][ T3895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.363956][ T3914] loop3: detected capacity change from 0 to 256 [ 43.408969][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.422310][ T3914] FAT-fs (loop3): Directory bread(block 64) failed [ 43.439324][ T3914] FAT-fs (loop3): Directory bread(block 65) failed [ 43.468320][ T3914] FAT-fs (loop3): Directory bread(block 66) failed [ 43.509017][ T3914] FAT-fs (loop3): Directory bread(block 67) failed [ 43.516501][ T3914] FAT-fs (loop3): Directory bread(block 68) failed [ 43.523027][ T3914] FAT-fs (loop3): Directory bread(block 69) failed [ 43.545289][ T3914] FAT-fs (loop3): Directory bread(block 70) failed [ 43.574611][ T3914] FAT-fs (loop3): Directory bread(block 71) failed [ 43.581269][ T3914] FAT-fs (loop3): Directory bread(block 72) failed [ 43.602880][ T3920] loop4: detected capacity change from 0 to 512 [ 43.607216][ T3914] FAT-fs (loop3): Directory bread(block 73) failed [ 43.626404][ T3920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.659452][ T3920] EXT4-fs (loop4): 1 truncate cleaned up [ 43.689542][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.803527][ T3927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.129'. [ 43.824053][ T3914] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 43.832688][ T3914] FAT-fs (loop3): Filesystem has been set read-only [ 43.867841][ T3932] loop0: detected capacity change from 0 to 512 [ 43.879329][ T3933] loop2: detected capacity change from 0 to 512 [ 43.903248][ T3933] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.912455][ T3933] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 43.922145][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.928776][ T3935] loop3: detected capacity change from 0 to 1024 [ 43.933871][ T3932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.957404][ T3935] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 43.977451][ T3935] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.988550][ T3933] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 44.017740][ T3932] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.028826][ T3933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 44.050673][ T3933] System zones: 0-2, 18-18, 34-34 [ 44.056146][ T3935] EXT4-fs (loop3): invalid journal inode [ 44.065913][ T3940] loop4: detected capacity change from 0 to 1024 [ 44.072848][ T3940] ext4: Unknown parameter 'silent' [ 44.077701][ T3935] EXT4-fs (loop3): can't get journal size [ 44.084238][ T3933] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.113853][ T3933] EXT4-fs (loop2): 1 truncate cleaned up [ 44.120325][ T3935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.134012][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.336205][ T3943] loop1: detected capacity change from 0 to 512 [ 44.366125][ T3943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.481517][ T3948] lo speed is unknown, defaulting to 1000 [ 44.686621][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.691140][ T3943] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.700071][ T3950] loop4: detected capacity change from 0 to 1024 [ 44.738384][ T3950] EXT4-fs: Ignoring removed orlov option [ 44.755623][ T3950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.777001][ T3950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.818172][ T3943] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.134: corrupted inode contents [ 44.832627][ T3943] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.134: mark_inode_dirty error [ 44.846636][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.865212][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.868151][ T3943] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.134: corrupted inode contents [ 44.890164][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.900960][ T3955] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.134: corrupted inode contents [ 44.924603][ T3955] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.134: mark_inode_dirty error [ 44.939073][ T3958] loop2: detected capacity change from 0 to 512 [ 44.956088][ T3962] loop0: detected capacity change from 0 to 512 [ 44.985444][ T3955] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.134: corrupted inode contents [ 44.998204][ T3958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.005673][ T3955] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.134: mark_inode_dirty error [ 45.014613][ T3962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.020512][ T3955] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.134: corrupted inode contents [ 45.045795][ T3954] loop3: detected capacity change from 0 to 1024 [ 45.050043][ T3955] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.134: mark_inode_dirty error [ 45.073095][ T3958] EXT4-fs (loop2): 1 truncate cleaned up [ 45.079580][ T3962] EXT4-fs (loop0): 1 truncate cleaned up [ 45.080073][ T3958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.085693][ T3943] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.134: corrupted inode contents [ 45.109929][ T3962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.130245][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.176653][ T3962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.228193][ T3962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.262050][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.279330][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.295765][ T3962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.387858][ T3962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.484118][ T3962] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.496450][ T3995] loop2: detected capacity change from 0 to 512 [ 45.523700][ T3993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.146'. [ 45.532631][ T3993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.146'. [ 45.558555][ T3962] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.558815][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 45.574274][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 45.583269][ T3962] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.591821][ T3374] hid-generic 0000:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 45.601678][ T3988] lo speed is unknown, defaulting to 1000 [ 45.621332][ T3962] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.693276][ T4001] netlink: 'syz.4.148': attribute type 21 has an invalid length. [ 45.701092][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 45.759599][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.801695][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.837545][ T4006] loop2: detected capacity change from 0 to 128 [ 45.905914][ T4006] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.923450][ T4009] loop1: detected capacity change from 0 to 512 [ 45.971498][ T4006] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.987190][ T4009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.115531][ T4016] loop0: detected capacity change from 0 to 512 [ 46.194546][ T4016] ext4: Unknown parameter 'fsuuid' [ 46.282609][ T4016] SELinux: syz.0.150 (4016) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.381292][ T4006] lo speed is unknown, defaulting to 1000 [ 46.394336][ T4009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.424426][ T4014] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 46.488338][ T4024] loop0: detected capacity change from 0 to 2048 [ 46.520803][ T4024] EXT4-fs: Ignoring removed bh option [ 46.577053][ T4024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.649313][ T4009] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.716646][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.752600][ T4028] dccp_invalid_packet: P.Data Offset(172) too large [ 46.803355][ T4032] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.501443][ T4087] netlink: 116 bytes leftover after parsing attributes in process `syz.2.162'. [ 47.512557][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.531433][ T4087] loop2: detected capacity change from 0 to 512 [ 47.548565][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.579318][ T4087] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 47.583791][ T4091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.594899][ T4087] System zones: 0-2, 18-18, 34-34 [ 47.605186][ T4091] team0: Device macvlan2 is already an upper device of the team interface [ 47.615367][ T4087] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.162: bg 0: block 248: padding at end of block bitmap is not set [ 47.630432][ T4087] __quota_error: 592 callbacks suppressed [ 47.630446][ T4087] Quota error (device loop2): write_blk: dquota write failed [ 47.643588][ T4087] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.654225][ T4087] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.162: Failed to acquire dquot type 1 [ 47.666622][ T4087] EXT4-fs (loop2): 1 truncate cleaned up [ 47.672904][ T4087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.733189][ T4087] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.884775][ T4098] lo speed is unknown, defaulting to 1000 [ 48.087095][ T4100] loop1: detected capacity change from 0 to 512 [ 48.119285][ T4100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.178851][ T29] audit: type=1326 audit(1737834882.628:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.206074][ T4100] EXT4-fs (loop1): 1 truncate cleaned up [ 48.218315][ T4100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.259471][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 48.278028][ T29] audit: type=1326 audit(1737834882.658:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.301453][ T29] audit: type=1326 audit(1737834882.658:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.324944][ T29] audit: type=1326 audit(1737834882.658:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.348280][ T29] audit: type=1326 audit(1737834882.658:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.371631][ T29] audit: type=1326 audit(1737834882.658:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.395012][ T29] audit: type=1326 audit(1737834882.658:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.418386][ T29] audit: type=1326 audit(1737834882.658:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32a2bfcd29 code=0x7ffc0000 [ 48.452016][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.457843][ T4108] syz.3.168 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.483922][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 48.496832][ T4108] netlink: 'syz.3.168': attribute type 13 has an invalid length. [ 48.506758][ T4087] syz.2.162 (4087) used greatest stack depth: 9184 bytes left [ 48.537805][ T4110] loop0: detected capacity change from 0 to 1024 [ 48.546210][ T4110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.546336][ T4110] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.560310][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.563711][ T4034] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 1 [ 48.598927][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.634511][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 48.663731][ T4108] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.663899][ T4108] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.702802][ T4108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.714035][ T4108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.764063][ T4108] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.773277][ T4108] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.782330][ T4108] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.791301][ T4108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.805752][ T24] lo speed is unknown, defaulting to 1000 [ 48.895022][ T4135] vlan2: entered allmulticast mode [ 48.933709][ T4136] bond1: entered promiscuous mode [ 48.938812][ T4136] bond1: entered allmulticast mode [ 48.948199][ T4136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.958477][ T4136] bond1 (unregistering): Released all slaves [ 48.980718][ T4139] vlan2: entered allmulticast mode [ 49.051426][ T4158] sd 0:0:1:0: device reset [ 49.086797][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 49.095716][ T4158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 49.114784][ T4158] vlan2: entered allmulticast mode [ 49.144114][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 49.160945][ T4164] Illegal XDP return value 1889109051 on prog (id 148) dev N/A, expect packet loss! [ 49.280901][ T4174] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 49.294031][ T4174] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 49.520924][ T4185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 49.917861][ T4192] loop3: detected capacity change from 0 to 164 [ 49.927781][ T4192] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.008750][ T4193] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.257474][ T4203] lo speed is unknown, defaulting to 1000 [ 50.458084][ T4210] 9pnet_fd: Insufficient options for proto=fd [ 50.471318][ T4210] loop4: detected capacity change from 0 to 512 [ 50.472247][ T4209] vlan2: entered promiscuous mode [ 50.483995][ T4210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.530302][ T4210] EXT4-fs (loop4): 1 truncate cleaned up [ 50.537461][ T4210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.583632][ T4218] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.631127][ T4221] loop2: detected capacity change from 0 to 164 [ 50.677227][ T4221] iso9660: Unknown parameter '00000000000000000000000' [ 50.743123][ T4223] vhci_hcd: invalid port number 127 [ 50.748410][ T4223] vhci_hcd: default hub control req: 6003 v000e i007f l172 [ 50.779474][ T4223] loop0: detected capacity change from 0 to 1024 [ 50.791627][ T4223] EXT4-fs: Ignoring removed orlov option [ 50.797479][ T4223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.840379][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.880443][ T4226] loop3: detected capacity change from 0 to 512 [ 50.892180][ T4226] EXT4-fs: inline encryption not supported [ 50.919424][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.935620][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.957450][ T4226] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.979231][ T4226] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.991935][ T4226] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 51.084066][ T4233] loop0: detected capacity change from 0 to 2048 [ 51.084665][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.102584][ T4233] EXT4-fs: inline encryption not supported [ 51.116015][ T4235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.205'. [ 51.139599][ T4233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.198091][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 51.244926][ T4245] loop3: detected capacity change from 0 to 512 [ 51.333657][ T4253] loop3: detected capacity change from 0 to 512 [ 51.381905][ T4253] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.395927][ T4258] loop4: detected capacity change from 0 to 764 [ 51.430667][ T4258] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.562175][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 51.573829][ T4255] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.621716][ T4268] loop4: detected capacity change from 0 to 512 [ 51.649265][ T4268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.655010][ T4255] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 51.671711][ T4255] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.671711][ T4255] [ 51.681447][ T4255] EXT4-fs (loop0): Total free blocks count 0 [ 51.683581][ T4268] EXT4-fs (loop4): 1 truncate cleaned up [ 51.687502][ T4255] EXT4-fs (loop0): Free/Dirty block details [ 51.699129][ T4255] EXT4-fs (loop0): free_blocks=2415919104 [ 51.705010][ T4255] EXT4-fs (loop0): dirty_blocks=8192 [ 51.710298][ T4255] EXT4-fs (loop0): Block reservation details [ 51.716377][ T4255] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 51.778426][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 51.787261][ T4273] netlink: 14 bytes leftover after parsing attributes in process `syz.2.215'. [ 51.959367][ T4276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 51.966722][ T4276] team0: Device macvlan2 is already an upper device of the team interface [ 51.987132][ T4051] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 52.181523][ T4287] loop0: detected capacity change from 0 to 512 [ 52.212247][ T4287] EXT4-fs: inline encryption not supported [ 52.242139][ T4287] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.276869][ T4287] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 52.363013][ T4298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'. [ 52.407838][ T4301] veth0_to_team: entered promiscuous mode [ 52.413612][ T4301] veth0_to_team: entered allmulticast mode [ 52.565015][ T4308] futex_wake_op: syz.4.225 tries to shift op by -1; fix this program [ 52.635467][ T29] kauditd_printk_skb: 1215 callbacks suppressed [ 52.635479][ T29] audit: type=1400 audit(1737834887.088:3134): avc: denied { setopt } for pid=4309 comm="syz.2.226" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.671582][ T29] audit: type=1400 audit(1737834887.118:3135): avc: denied { create } for pid=4309 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.708937][ T29] audit: type=1326 audit(1737834887.158:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 52.732386][ T29] audit: type=1326 audit(1737834887.158:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 52.757390][ T29] audit: type=1400 audit(1737834887.158:3138): avc: denied { module_request } for pid=4312 comm="syz.4.227" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.779657][ T29] audit: type=1326 audit(1737834887.208:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 52.874142][ T29] audit: type=1326 audit(1737834887.318:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 52.897609][ T29] audit: type=1326 audit(1737834887.318:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 52.934241][ T4332] $H: renamed from bond0 [ 52.939117][ T29] audit: type=1326 audit(1737834887.378:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 52.962486][ T29] audit: type=1326 audit(1737834887.378:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 52.987623][ T4332] $H: entered promiscuous mode [ 52.992668][ T4332] bond_slave_0: entered promiscuous mode [ 52.998475][ T4332] bond_slave_1: entered promiscuous mode [ 53.231751][ T4376] ip6gre2: entered allmulticast mode [ 53.290234][ T4389] 9pnet_fd: Insufficient options for proto=fd [ 53.452055][ T4422] bridge0: port 3(vlan3) entered blocking state [ 53.458427][ T4422] bridge0: port 3(vlan3) entered disabled state [ 53.469400][ T4422] vlan3: entered allmulticast mode [ 53.480010][ T4422] vlan3: left allmulticast mode [ 53.512060][ T4431] team0: Device gtp0 is of different type [ 53.565809][ T4441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.673506][ T4464] loop2: detected capacity change from 0 to 1024 [ 53.680141][ T4466] loop1: detected capacity change from 0 to 1024 [ 53.687007][ T4464] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.689438][ T4466] ext4: Unknown parameter 'appraise' [ 53.698989][ T4464] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.710980][ T4464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.717931][ T4464] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.241: Invalid inode table block 0 in block_group 0 [ 53.730934][ T4464] EXT4-fs (loop2): Remounting filesystem read-only [ 53.737563][ T4464] EXT4-fs (loop2): 1 truncate cleaned up [ 53.749178][ T4464] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 53.788276][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 53.796152][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 53.920176][ T4476] lo speed is unknown, defaulting to 1000 [ 53.924947][ T4480] loop3: detected capacity change from 0 to 512 [ 53.960712][ T4484] loop3: detected capacity change from 0 to 512 [ 53.978955][ T4484] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.992093][ T4482] lo speed is unknown, defaulting to 1000 [ 54.326062][ T4495] loop0: detected capacity change from 0 to 2048 [ 54.335723][ T4495] EXT4-fs: inline encryption not supported [ 54.732860][ T24] IPVS: starting estimator thread 0... [ 54.824684][ T4509] IPVS: using max 2880 ests per chain, 144000 per kthread [ 55.023524][ T4495] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.078636][ T4495] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.091115][ T4495] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.091115][ T4495] [ 55.100941][ T4495] EXT4-fs (loop0): Total free blocks count 0 [ 55.107040][ T4495] EXT4-fs (loop0): Free/Dirty block details [ 55.112930][ T4495] EXT4-fs (loop0): free_blocks=2415919104 [ 55.118669][ T4495] EXT4-fs (loop0): dirty_blocks=8192 [ 55.123949][ T4495] EXT4-fs (loop0): Block reservation details [ 55.129999][ T4495] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 55.172996][ T4047] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 55.185835][ T4047] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.185835][ T4047] [ 55.283997][ T4516] loop2: detected capacity change from 0 to 2048 [ 55.300826][ T4514] pimreg: entered allmulticast mode [ 55.341956][ T4524] __nla_validate_parse: 1 callbacks suppressed [ 55.341971][ T4524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.254'. [ 55.361874][ T4524] delete_channel: no stack [ 55.366567][ T4524] delete_channel: no stack [ 55.486197][ T4540] loop2: detected capacity change from 0 to 512 [ 55.493483][ T4540] EXT4-fs: Invalid want_extra_isize 5 [ 55.498564][ T4538] loop4: detected capacity change from 0 to 2048 [ 55.511360][ T4540] loop2: detected capacity change from 0 to 256 [ 55.522833][ T4540] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.536829][ T4538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.571836][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 55.637472][ T4554] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.828383][ T4568] netlink: 'syz.4.272': attribute type 39 has an invalid length. [ 55.828438][ T4570] lo speed is unknown, defaulting to 1000 [ 55.845919][ T4576] loop2: detected capacity change from 0 to 1024 [ 55.864353][ T4576] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 55.977803][ T4582] loop1: detected capacity change from 0 to 1024 [ 55.980776][ T4582] EXT4-fs: Ignoring removed orlov option [ 55.980874][ T4582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.999061][ T4584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.278'. [ 56.010048][ T4582] netlink: 'GPL': attribute type 15 has an invalid length. [ 56.296103][ T4596] loop2: detected capacity change from 0 to 512 [ 56.367871][ T4596] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.791893][ T4595] bond1: entered promiscuous mode [ 56.797001][ T4595] bond1: entered allmulticast mode [ 56.824142][ T4595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.857857][ T4595] bond1 (unregistering): Released all slaves [ 57.019969][ T4610] batman_adv: batadv0: Adding interface: ip6gretap1 [ 57.026699][ T4610] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.180504][ T4610] batman_adv: batadv0: Interface activated: ip6gretap1 [ 57.421767][ T4624] hub 9-0:1.0: USB hub found [ 57.484681][ T4624] hub 9-0:1.0: 8 ports detected [ 57.657705][ T29] kauditd_printk_skb: 1066 callbacks suppressed [ 57.657717][ T29] audit: type=1326 audit(1737834892.108:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.691951][ T4627] loop3: detected capacity change from 0 to 8192 [ 57.711955][ T29] audit: type=1326 audit(1737834892.138:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.735397][ T29] audit: type=1326 audit(1737834892.138:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.758860][ T29] audit: type=1326 audit(1737834892.138:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.782286][ T29] audit: type=1326 audit(1737834892.138:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.821814][ T4616] loop0: detected capacity change from 0 to 512 [ 57.827391][ T4629] loop2: detected capacity change from 0 to 2048 [ 57.828825][ T4627] syz.3.287: attempt to access beyond end of device [ 57.828825][ T4627] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.834980][ T4629] EXT4-fs: inline encryption not supported [ 57.870546][ T29] audit: type=1326 audit(1737834892.238:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 57.870894][ T4616] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.893916][ T29] audit: type=1326 audit(1737834892.238:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 57.914897][ T4627] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 57.925699][ T29] audit: type=1326 audit(1737834892.258:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.925791][ T29] audit: type=1326 audit(1737834892.258:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.925813][ T29] audit: type=1326 audit(1737834892.268:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb429dcd29 code=0x7ffc0000 [ 57.965488][ T4616] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.285: invalid block [ 57.980338][ T4627] FAT-fs (loop3): Filesystem has been set read-only [ 57.989626][ T4627] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 58.005313][ T4616] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.285: invalid indirect mapped block 4294967295 (level 1) [ 58.044831][ T4616] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.285: invalid indirect mapped block 4294967295 (level 1) [ 58.059562][ T4616] EXT4-fs (loop0): 2 truncates cleaned up [ 58.078651][ T4627] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 58.109734][ T4033] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.125207][ T4033] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1116 with error 28 [ 58.137744][ T4033] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.137744][ T4033] [ 58.147486][ T4033] EXT4-fs (loop2): Total free blocks count 0 [ 58.153472][ T4033] EXT4-fs (loop2): Free/Dirty block details [ 58.159397][ T4033] EXT4-fs (loop2): free_blocks=2415919104 [ 58.161818][ T4618] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.285'. [ 58.165186][ T4033] EXT4-fs (loop2): dirty_blocks=1808 [ 58.179683][ T4033] EXT4-fs (loop2): Block reservation details [ 58.185711][ T4033] EXT4-fs (loop2): i_reserved_data_blocks=127 [ 58.193348][ T4645] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.193514][ T4616] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.285'. [ 58.200859][ T4645] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 58.201393][ T4645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.211727][ T4618] ext4: Unknown parameter '' [ 58.222527][ T4645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.249547][ T4636] lo speed is unknown, defaulting to 1000 [ 58.341312][ T4653] loop1: detected capacity change from 0 to 128 [ 58.398930][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 58.497230][ T4631] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1116 with max blocks 2048 with error 28 [ 58.509984][ T4631] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.509984][ T4631] [ 58.560797][ T4034] kworker/u8:10: attempt to access beyond end of device [ 58.560797][ T4034] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 58.654627][ T4659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'. [ 58.688202][ T4659] loop1: detected capacity change from 0 to 512 [ 58.697008][ T4659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.726027][ T4659] EXT4-fs (loop1): 1 truncate cleaned up [ 58.813791][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 58.832342][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.839810][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.847937][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.855436][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.870343][ T4672] loop3: detected capacity change from 0 to 1024 [ 58.879421][ T4672] ext4: Unknown parameter 'appraise' [ 59.517970][ T4672] lo speed is unknown, defaulting to 1000 [ 59.587839][ T4672] lo speed is unknown, defaulting to 1000 [ 59.710400][ T4681] loop2: detected capacity change from 0 to 1024 [ 59.717305][ T4681] ext4: Unknown parameter 'appraise' [ 60.009950][ T4681] lo speed is unknown, defaulting to 1000 [ 60.085033][ T4691] sd 0:0:1:0: device reset [ 60.157453][ T4691] loop0: detected capacity change from 0 to 164 [ 60.180134][ T4686] lo speed is unknown, defaulting to 1000 [ 60.187579][ T4691] ISOFS: unable to read i-node block [ 60.192926][ T4691] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 60.379058][ T4701] bridge0: port 3(gretap0) entered blocking state [ 60.385550][ T4701] bridge0: port 3(gretap0) entered disabled state [ 60.392093][ T4701] gretap0: entered allmulticast mode [ 60.445495][ T4701] gretap0: entered promiscuous mode [ 60.573333][ T4704] 9pnet_fd: Insufficient options for proto=fd [ 60.767027][ T4707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 60.808688][ T4707] loop2: detected capacity change from 0 to 512 [ 60.829300][ T4707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.856325][ T4707] EXT4-fs (loop2): 1 truncate cleaned up [ 60.930650][ T4715] loop1: detected capacity change from 0 to 1024 [ 60.950407][ T4715] ext4: Unknown parameter 'appraise' [ 61.284038][ T4722] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 61.576999][ T4731] loop3: detected capacity change from 0 to 1024 [ 61.603047][ T4731] ext4: Unknown parameter 'appraise' [ 61.611035][ T4725] lo speed is unknown, defaulting to 1000 [ 62.105492][ T4736] loop4: detected capacity change from 0 to 512 [ 62.166456][ T4736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.183140][ T4726] lo speed is unknown, defaulting to 1000 [ 62.195236][ T4736] EXT4-fs (loop4): 1 truncate cleaned up [ 62.209421][ T4731] lo speed is unknown, defaulting to 1000 [ 62.255396][ T4737] lo speed is unknown, defaulting to 1000 [ 62.330862][ T4744] sd 0:0:1:0: device reset [ 62.407269][ T4744] loop2: detected capacity change from 0 to 164 [ 62.412240][ T4747] loop0: detected capacity change from 0 to 1024 [ 62.435852][ T4747] ext4: Unknown parameter 'appraise' [ 62.442110][ T4744] ISOFS: unable to read i-node block [ 62.447499][ T4744] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 62.685525][ T4756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.322'. [ 62.728220][ T4756] loop4: detected capacity change from 0 to 512 [ 62.744631][ T4756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.758071][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 62.758083][ T29] audit: type=1326 audit(1737834897.208:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 62.787766][ T29] audit: type=1326 audit(1737834897.208:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 62.858867][ T4756] EXT4-fs (loop4): 1 truncate cleaned up [ 62.889242][ T29] audit: type=1326 audit(1737834897.268:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4746 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 62.912619][ T29] audit: type=1326 audit(1737834897.268:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4746 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a705cd29 code=0x7ffc0000 [ 62.936161][ T29] audit: type=1326 audit(1737834897.268:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 62.959586][ T29] audit: type=1326 audit(1737834897.268:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 62.982962][ T29] audit: type=1326 audit(1737834897.268:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 63.006368][ T29] audit: type=1326 audit(1737834897.268:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 63.029741][ T29] audit: type=1326 audit(1737834897.268:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 63.039019][ T4747] lo speed is unknown, defaulting to 1000 [ 63.053049][ T29] audit: type=1326 audit(1737834897.268:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0511cd29 code=0x7ffc0000 [ 63.220581][ T4747] lo speed is unknown, defaulting to 1000 [ 63.368265][ T4772] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 63.657162][ T4762] lo speed is unknown, defaulting to 1000 [ 63.862492][ T4781] bond_slave_1: entered promiscuous mode [ 63.875678][ T4781] bond_slave_1: left promiscuous mode [ 64.161849][ T4788] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.228798][ T4790] loop0: detected capacity change from 0 to 1024 [ 64.260591][ T4790] ext4: Unknown parameter 'appraise' [ 64.331403][ T4790] lo speed is unknown, defaulting to 1000 [ 64.405178][ T4790] lo speed is unknown, defaulting to 1000 [ 64.567276][ T4794] loop2: detected capacity change from 0 to 512 [ 64.672288][ T4794] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.776933][ T4802] loop3: detected capacity change from 0 to 1024 [ 64.832068][ T4802] ext4: Unknown parameter 'appraise' [ 65.198358][ T4805] lo speed is unknown, defaulting to 1000 [ 65.347954][ T4807] lo speed is unknown, defaulting to 1000 [ 65.479968][ T4814] loop1: detected capacity change from 0 to 1024 [ 65.506216][ T4814] ext4: Unknown parameter 'appraise' [ 65.627218][ T4821] loop3: detected capacity change from 0 to 512 [ 65.702759][ T4821] ext4: Unknown parameter 'audit' [ 65.864145][ T4827] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 65.945377][ T4822] lo speed is unknown, defaulting to 1000 [ 65.995045][ T4829] lo speed is unknown, defaulting to 1000 [ 66.338992][ T4834] loop7: detected capacity change from 0 to 16384 [ 66.345884][ T4837] loop3: detected capacity change from 0 to 1024 [ 66.355468][ T4837] ext4: Unknown parameter 'appraise' [ 66.422452][ T4837] lo speed is unknown, defaulting to 1000 [ 66.538084][ T4837] lo speed is unknown, defaulting to 1000 [ 66.545856][ T4839] loop7: detected capacity change from 16384 to 16383 [ 66.578664][ T4834] blk_print_req_error: 1 callbacks suppressed [ 66.578678][ T4834] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 [ 66.584824][ T4839] I/O error, dev loop7, sector 3800 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 66.584849][ T4839] buffer_io_error: 633 callbacks suppressed [ 66.584860][ T4839] Buffer I/O error on dev loop7, logical block 475, lost async page write [ 66.606465][ T4834] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 66.610534][ T4839] Buffer I/O error on dev loop7, logical block 476, lost async page write [ 66.619887][ T4834] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.629043][ T4839] Buffer I/O error on dev loop7, logical block 477, lost async page write [ 66.637574][ T4834] Buffer I/O error on dev loop7, logical block 768, async page read [ 66.646950][ T4839] Buffer I/O error on dev loop7, logical block 478, lost async page write [ 66.672070][ T4839] Buffer I/O error on dev loop7, logical block 479, lost async page write [ 66.680676][ T4839] Buffer I/O error on dev loop7, logical block 480, lost async page write [ 66.689454][ T4839] Buffer I/O error on dev loop7, logical block 481, lost async page write [ 66.698090][ T4839] Buffer I/O error on dev loop7, logical block 482, lost async page write [ 66.706835][ T4839] Buffer I/O error on dev loop7, logical block 483, lost async page write [ 66.796609][ T4839] I/O error, dev loop7, sector 4824 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 66.830535][ T4839] I/O error, dev loop7, sector 5848 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 66.905573][ T3296] ================================================================== [ 66.913686][ T3296] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 66.921172][ T3296] [ 66.923494][ T3296] read-write to 0xffff888117899278 of 8 bytes by task 4852 on cpu 0: [ 66.931560][ T3296] inode_add_bytes+0x45/0xd0 [ 66.936173][ T3296] __dquot_alloc_space+0x181/0x8a0 [ 66.941348][ T3296] shmem_inode_acct_blocks+0x124/0x230 [ 66.946825][ T3296] shmem_get_folio_gfp+0x5be/0xd90 [ 66.951955][ T3296] shmem_write_begin+0xa2/0x180 [ 66.956828][ T3296] generic_perform_write+0x1a8/0x4a0 [ 66.962131][ T3296] shmem_file_write_iter+0xc2/0xe0 [ 66.967247][ T3296] __kernel_write_iter+0x247/0x4c0 [ 66.972370][ T3296] dump_user_range+0x3ac/0x550 [ 66.977146][ T3296] elf_core_dump+0x1bdc/0x1ce0 [ 66.981923][ T3296] do_coredump+0x1722/0x1c90 [ 66.986523][ T3296] get_signal+0xd4f/0x1000 [ 66.990947][ T3296] arch_do_signal_or_restart+0x95/0x4b0 [ 66.996498][ T3296] irqentry_exit_to_user_mode+0xa7/0x120 [ 67.002134][ T3296] irqentry_exit+0x12/0x50 [ 67.006556][ T3296] asm_exc_page_fault+0x26/0x30 [ 67.011418][ T3296] [ 67.013737][ T3296] read to 0xffff888117899278 of 8 bytes by task 3296 on cpu 1: [ 67.021276][ T3296] generic_fillattr+0x274/0x330 [ 67.026136][ T3296] shmem_getattr+0x17b/0x200 [ 67.030732][ T3296] vfs_statx_path+0x171/0x2d0 [ 67.035414][ T3296] vfs_statx+0xe1/0x170 [ 67.039572][ T3296] __se_sys_newfstatat+0xdc/0x300 [ 67.044603][ T3296] __x64_sys_newfstatat+0x55/0x70 [ 67.049637][ T3296] x64_sys_call+0x236d/0x2dc0 [ 67.054325][ T3296] do_syscall_64+0xc9/0x1c0 [ 67.058825][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.064719][ T3296] [ 67.067035][ T3296] value changed: 0x00000000000060d8 -> 0x00000000000060e0 [ 67.074132][ T3296] [ 67.076452][ T3296] Reported by Kernel Concurrency Sanitizer on: [ 67.082606][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: syz-executor Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 67.093112][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.103172][ T3296] ================================================================== [ 67.300345][ T4849] loop2: detected capacity change from 0 to 2048 [ 67.315702][ T4839] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.370358][ T4839] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.379619][ T4839] loop7: unable to read partition table [ 67.417598][ T4839] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 67.435477][ T4839] I/O error, dev loop7, sector 5888 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0