last executing test programs: 28.171799628s ago: executing program 4 (id=73): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0xd905, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2b, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xe, 0x2, 0x9, 0x5, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x25}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfc5a1d6dd96e0ae9}, @jmp={0x5, 0x0, 0xd, 0x7, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000ffc000/0x2000)=nil) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) unshare(0xc000c00) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xda90) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000440)={{0x0, 0x9, 0x2, 0x1, 0x6, 0x7, 0x1ff, 0xfff, 0xa31, 0xa, 0x10, 0x2, 0x9, 0x64, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000500)={0x0, r8, "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", "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"}) ioctl$int_in(r7, 0x5452, &(0x7f0000000380)=0x3) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept4(r7, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x40, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x38}}, 0x20008000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0x89e77144001d22c}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0xfffffe61, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 27.368392913s ago: executing program 4 (id=78): syz_emit_ethernet(0x48, &(0x7f0000001000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000123afffe800000000000abd5c5208edee32eaaff0200000000000000000000000000018600907800fc0400000000000000000003005113c3124268d2dd72e1f7e3a2f58d793ee62008da741e6e401b4f552d9e5734ecc4418a61b31472f37fed011289963aacc332"], 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1200414, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8002}}, {@showassoc}, {@hide}, {@uid}, {}, {@overriderock}]}, 0x5, 0x56b, &(0x7f0000000a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r0, &(0x7f0000000980)=""/254, 0xfe) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) recvmsg$inet_nvme(r3, &(0x7f0000000100)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001600)=""/252, 0xfc}, {&(0x7f00000005c0)=""/165, 0xa5}, {&(0x7f0000000540)=""/18, 0x12}], 0x3, &(0x7f00000004c0)=""/69, 0x45}, 0x12140) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) set_robust_list(&(0x7f0000000300)={0x0, 0x9}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x11, r0, 0x648f5000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r8, r7, 0x5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 27.294579689s ago: executing program 4 (id=79): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x3a1a41, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 26.392825532s ago: executing program 4 (id=81): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4100, 0x1004}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==") r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 25.941680669s ago: executing program 4 (id=84): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001ecb350355c47d6c94e4ee00000003001100003aace6d677104b267c60f8f4429a5a6d67186b00c814fd468022933590307613791d11d10ee6f73cb0e81c0009c180ae8ee274db932bfc4b81221f1383ec17955aa4df461abd0de2ed0251d804231dee03d01d3692267fe1ee61085437d2853689c464575021526b7756b4ddc80d7faf41248bf7ffffff7fca", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) setresuid(0xee00, 0xee01, 0xee01) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r11, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 25.607066636s ago: executing program 4 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() ioprio_get$pid(0x2, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e"], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf250f00000008000600090000001c000280247f41ca491a54dc8bcf7b06000b000200000006000e004e23000008000900e50000000800040009000000080006000002000008000600000000005ac2c8b1535e315a8087edd349dcf136995ad83b7dec4e0d0ac1eaf135d06fd8"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='memory.numa_stat\x00') r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01ef24bd057280802a2501"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) fcntl$getflags(r0, 0x40b) syz_emit_ethernet(0x10d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r9 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r10, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) 25.601321226s ago: executing program 32 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() ioprio_get$pid(0x2, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e"], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf250f00000008000600090000001c000280247f41ca491a54dc8bcf7b06000b000200000006000e004e23000008000900e50000000800040009000000080006000002000008000600000000005ac2c8b1535e315a8087edd349dcf136995ad83b7dec4e0d0ac1eaf135d06fd8"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='memory.numa_stat\x00') r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01ef24bd057280802a2501"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) fcntl$getflags(r0, 0x40b) syz_emit_ethernet(0x10d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r9 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r10, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) 6.16770287s ago: executing program 2 (id=188): io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x0, 0x200019f}) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="78040000000000000d01000005000000ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6627d00c51fd572f6113013d16a54d005b0f833f3c9cde6b897172b7ddc1b063781f822e06890c08ad3025e80b4a550a680e58053a8c33d2e1858f971a40788f6b287baa082a334140c0091f5f2d232ecbc86218a477e468e5be1b48d7787071b5c891cc3efde21a3b0337adeaa6a41ce8fd6edf1b0a47ca0cd6d785cc2c1c3803dde4d9749a10e21d489531efca60760b4ff2061dd7800c4f23c3d1e2bcd694fcc87261a2fdfee6baaa701c7083e9675a75b8d530f09f72d8d3fed4ed848ba18d11635893b52c84a6f0fdc9711b63cba52c9e33ac701261d5459b6ff53be036549b6d0e617d125a6a758370d0671f5f956918db7c4d0afb4f7369bad2a1cf0b7bcf130464bb031b092392a72e8234c1cc1d41190dad660bd1d9283d7d4c7f7410c83f6cfbd25b438097f3e5fd4a23e56c1995179797f03c6dfc5e8be4515fbc72ef9ecbb7cd80d4e71d2ac2f31396081eb9fee4b5d633aee32775a004f7aee9f33d81f9e469a1bef0a995ca8d50c2d853bfb1ebaf301d0c649b74827ae650b6a3bec85e2e9fd45e33bdd8c29cb0692d78a73700daf8eaff8efc06f8c07b3ce384ab1d925cdc440a4b85ace1edb6202df092fe6b37c11e10f3cb3d9e0cc19d55989766aec965403244c8dabfcdcc51c2297131307048ffc88b47d07e821656fa73395dd464d79ee82b3d4f47bd29f42f44f9521efdec7b0e8b5436d496ae046d72d69bc3d35a62829954fdf87fa10330a7864465ee86c540b2e1320e8453701898027ef86ad0d7c31c009f0e5f4c35eeb870ba4caa3708656b38c3797aaadb4b372acf23c05d55d98eb8c1c628e744a6a4439b5a515a2a083f8fbc71a2e6800c3ffec640d21d05a4b1f4548c5541f809e9766cce96b2c53b220361638c4dc43af7d5edb874bb48ca3c8a837fdccff0c8b50bc402da6262c5e3b344f313153fd455e4414f2b0e4a2bcf881b5615e399f8bbe6c3c20a314539b856de845a6e37e5f6925f3d5929eb59243b792834b0de7643077681b9113f5d192c4e96ebea0465901e5aa5da812b0d112089c048e29c523a753f7babe4e3de0bff0f220493bef0e7b76b051cecc325a8fb60a76880155ed33bbbccb472dd3b568829eb7cfb4280521adee82b1b1b7c31b0baa329f81f254526461b787d32bd18a760944a3f728a8a257f2bb9bc9172daeeb9a3d099fa60a440063b70cb48a54cf8739467f7e2b075b74800056475332bd226daf3e7a85c198107c3fe4818e78dda31d1d8c4c618c218e368a0e20655c325f95ebdb03320448cfd754064e7a6b69b1677d12a5"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) dup(0xffffffffffffffff) 5.402724342s ago: executing program 0 (id=196): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffc}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) write$selinux_access(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a65631a8a76b3743a73302073797374656d5f753a73797374656d5f723a6b65726e656c1762867e2b4d3a8548ad26ccd55f743a73302030"], 0x53) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) ioperm(0x3, 0x5, 0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = memfd_secret(0x0) futimesat(r5, 0x0, 0x0) 5.275440233s ago: executing program 2 (id=198): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x40010) socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) unshare(0x20060400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffbb1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x9, 0xf99a47eecf5d5b05, r5, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xf}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file1\x00', 0x0, 0x4000, r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c6a800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) 4.577548919s ago: executing program 1 (id=200): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 4.553478061s ago: executing program 5 (id=201): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x7}, 0x4100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x500, 0xa8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r9, 0x0) keyctl$unlink(0x9, r4, r4) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 4.149632694s ago: executing program 5 (id=202): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000), &(0x7f00000000c0)) 4.145674894s ago: executing program 0 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 3.411935944s ago: executing program 1 (id=205): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000680), 0x0, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r6, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 3.355424098s ago: executing program 0 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 3.353546518s ago: executing program 1 (id=216): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 3.282990644s ago: executing program 5 (id=207): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) 2.770895216s ago: executing program 0 (id=208): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, 0x0, 0x0, 0xe, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000a608000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) 2.770407355s ago: executing program 3 (id=209): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000850000/0x1000)=nil, 0x1000) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x4, r1, 0x0, 0x0, 0x9}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, 0xffffffffffffffff, 0xfffffffffffffffe}]) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="6012a0af", @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x24040011) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='attr/sockcreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$incfs(r1, &(0x7f0000001040)='.pending_reads\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1f, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000000)=0x7f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[], 0xa8}}, 0x20000111) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYRES16=r6, @ANYRES16], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind(r9, &(0x7f0000000180)=@phonet={0x1e, 0xe, 0x9, 0x7}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000240)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@user_xattr}]}, 0x1, 0x429, &(0x7f0000000740)="$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") open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) 2.364570478s ago: executing program 1 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="6b32f0a3286c7b790f4b487d647233008608e36dec511dc761ef238281e4950bf38323bbef89c09d97946dfcbb4fbe9fd1a372838876e31a6f570b0a622c659f7fb83b7fb98ef4cad44af55890566af782", @ANYRES64], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r0, &(0x7f00000001c0)="ca1221e705e4cfc99a0d997b8810a66a57baf590f0309bb95243086113a7ae9f524258c6f132", &(0x7f0000000380)=""/238}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={0xffffffffffffffff, &(0x7f0000000340)="e2a2b8a7e55b8806b9993f7651fce9cd6a0f6c292ec112ad3bcfc13165db5f0c9c73e9228808a3058bdb57f65b842aa2083bfeffdf1c1f111a78bec3ef7abd", 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe9, 0xb, &(0x7f0000000840)="00000000000000000ce5d3b84eb217b5ec76656b4e19d9c02d85928631d6254af47c2eac504853c89b4965a722a182e42549e01f5bb2a6c22b4ab5dc487b3144799396930234174b61b930e2dedc2ed8b26fa8ceebbe28a1a06822e4e571bc44ead70e782b463bd3b00efc0d9c19c0e6798cb35a6d89f79c8578d0c7af9e3e9cb953b17aee5c6f3171fb64c13fbcfbecee14bce89d35649c67e7d727fcda1b75878f0ea8bd36b967bce9cd573f46e3e7de1785c1790ec22ad68e91b7dedb413561a562b312caddc08d65ee2df37ddfecc66aeef52373e8cc151834eff140658be1046e1573ab4410d5", &(0x7f0000000600)=""/11, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create1(0x0) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x80000) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x105042, 0x69) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000540)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000580)={0x20004002}) epoll_pwait(r6, &(0x7f0000000080), 0x0, 0x80000020, 0x0, 0x0) shutdown(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) connect$can_bcm(r2, &(0x7f0000000000), 0x10) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 2.186709363s ago: executing program 5 (id=211): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r5, 0x0, 0x40001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 1.928657384s ago: executing program 3 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) set_robust_list(0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000640)='rpc_call_rpcerror\x00', r6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7, 0x7, 0x1202, 0x8}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) set_tid_address(0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x20000000) close(r3) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.542274515s ago: executing program 3 (id=213): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x7}, 0x4100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x500, 0xa8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r9, 0x0) keyctl$unlink(0x9, r4, r4) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 1.413067986s ago: executing program 3 (id=214): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x40010) socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) unshare(0x20060400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffbb1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x9, 0xf99a47eecf5d5b05, r5, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xf}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file1\x00', 0x0, 0x4000, r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c6a800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) 1.279175206s ago: executing program 2 (id=215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) wait4(r3, &(0x7f0000000180), 0x1000000, &(0x7f00000006c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.063361544s ago: executing program 5 (id=217): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000680), 0x0, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r6, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 845.483111ms ago: executing program 0 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 834.479072ms ago: executing program 1 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 824.752223ms ago: executing program 2 (id=220): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='rxrpc_rx_data\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000012cc226984964dae79073700001f00000000000900000000000000", @ANYRES32=r5, @ANYBLOB="000100"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x15, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x817415f5, 0x0, 0x0, 0x0, 0xb7d4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x99000, 0xe0, &(0x7f0000000740)=""/224, 0x41000, 0x20, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[r2, r0, r6], &(0x7f0000000880)=[{0x0, 0x6, 0x9, 0x6}], 0x10, 0xfffffffa}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0xa0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x205, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xf85a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xa3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0xa0}}, 0x40050) 734.43983ms ago: executing program 5 (id=221): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 592.303822ms ago: executing program 0 (id=222): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 524.077388ms ago: executing program 2 (id=223): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000680), 0x0, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r6, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 520.640728ms ago: executing program 3 (id=224): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000cffffffffffffffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xa000) r3 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000500)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x0, 0x10000, 0x1, 0x1, 0x200b, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xffffffffffffff1a}, 0x0) close(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) eventfd2(0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="6ae536c89830450886bf04a6a6c6f737dfe90479fb44936defacfb2023dd9b2c02a7ff321f3ede797e7f5391d157b6f7b481da144fde192026c17c1cd5f7c11b154c341e0a66d7e452487ddf653a5fa05a55b42567581b2e0ed2181b4f79c7a4743b49a0d7ca9799488d18fd4c2e119df31338b3bbafa08667f413744b216f1cdcba5c83daacdad7a635c047210a0564cece7e19b724097f4a74", 0x9a}, {&(0x7f0000000000)="613077b9ef0068872bbfeaba4aab", 0xe}, {&(0x7f0000000200)="821ce4b40b3672f98ec699e6e2b42ae03f21711cdd75bb626d43ecc2a40e4320ee4707ce3fcead24aa96666ff5296c1f3c50f1a59332a93e1a5746b6484e47898537f87fc30c90891d1ed188f7c2911ae27ae09f71213b6b0426a6fc31589233c73aedfebbbeee4b8d23ebbe72a5578e82afa1daebbc5a3ef5357af4", 0x7c}, {&(0x7f0000000280)="6e353aaddf116d9361a5c607c5d9d5f1c899d805faaaa7b7bc1acc5366a0a9c0ea619a63bb8dcee9a8e44fb938f9c6af9abb92e2eadde7021fd2535d3362a2726f20b1b12a8617a802ce212b99c2530a6edff96df41a4e164c2cf567357d5251ed9645c8d54d337305262ea55542eee1d04a3e513c3f8a4d81f0f82b45e50e2bb951695e528282dce4ace9a9f6371dcf7d9e65f9732c0362e388111afbc8b40c6cafc2b6aeb574473b6e1751cf66", 0xae}], 0x4) 452.371154ms ago: executing program 2 (id=225): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) writev(r1, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000180)="89f30504869fcbf8a5a63afd2d8b4a0738ee0bea6e77d2b35afcbbf8289fdbed02aed75346c199020890dba7ec59cb0bdaec252b46a8a53b4b87db586c900a1352ab9101", 0x44}, {&(0x7f0000000200)="5b6df6375fbe91aea0119a0f8bf01d946bc35910773fa784c2d6d8fa06", 0x1d}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='fsi_dev_init\x00', r0, 0x0, 0xb}, 0x18) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0, 0x4000}, 0x4004881) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ec0)={0x20, 0x0, 0x2586ad4018a3b31b, 0x1, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r11, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 67.577245ms ago: executing program 3 (id=226): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x40010) socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) unshare(0x20060400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffbb1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x9, 0xf99a47eecf5d5b05, r5, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xf}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file1\x00', 0x0, 0x4000, r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c6a800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) 0s ago: executing program 1 (id=227): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x7}, 0x4100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x500, 0xa8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r8, 0x0) keyctl$unlink(0x9, r4, r4) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 26.412842][ T29] audit: type=1400 audit(1753873156.604:62): avc: denied { mounton } for pid=3276 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.414064][ T3276] cgroup: Unknown subsys name 'net' [ 26.435798][ T29] audit: type=1400 audit(1753873156.604:63): avc: denied { mount } for pid=3276 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.463124][ T29] audit: type=1400 audit(1753873156.634:64): avc: denied { unmount } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.601464][ T3276] cgroup: Unknown subsys name 'cpuset' [ 26.607840][ T3276] cgroup: Unknown subsys name 'rlimit' [ 26.779264][ T29] audit: type=1400 audit(1753873156.964:65): avc: denied { setattr } for pid=3276 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.803892][ T29] audit: type=1400 audit(1753873156.964:66): avc: denied { create } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.824538][ T29] audit: type=1400 audit(1753873156.974:67): avc: denied { write } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.844931][ T29] audit: type=1400 audit(1753873156.974:68): avc: denied { read } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.865269][ T29] audit: type=1400 audit(1753873156.974:69): avc: denied { mounton } for pid=3276 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.890120][ T29] audit: type=1400 audit(1753873156.974:70): avc: denied { mount } for pid=3276 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.899407][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.922202][ T29] audit: type=1400 audit(1753873157.114:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.965597][ T3276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.822076][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.860058][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.905064][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.912342][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.919512][ T3300] bridge_slave_0: entered allmulticast mode [ 28.925998][ T3300] bridge_slave_0: entered promiscuous mode [ 28.936371][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.943497][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.950751][ T3300] bridge_slave_1: entered allmulticast mode [ 28.957095][ T3300] bridge_slave_1: entered promiscuous mode [ 28.996877][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.008928][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.034723][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.067951][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.083043][ T3300] team0: Port device team_slave_0 added [ 29.104350][ T3300] team0: Port device team_slave_1 added [ 29.110070][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.117219][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.124449][ T3299] bridge_slave_0: entered allmulticast mode [ 29.130993][ T3299] bridge_slave_0: entered promiscuous mode [ 29.138269][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.145533][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.152718][ T3299] bridge_slave_1: entered allmulticast mode [ 29.159134][ T3299] bridge_slave_1: entered promiscuous mode [ 29.185145][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.192439][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.218833][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.246081][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.253284][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.260482][ T3306] bridge_slave_0: entered allmulticast mode [ 29.267161][ T3306] bridge_slave_0: entered promiscuous mode [ 29.277611][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.284698][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.310651][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.330175][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.350948][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.358051][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.365484][ T3306] bridge_slave_1: entered allmulticast mode [ 29.371878][ T3306] bridge_slave_1: entered promiscuous mode [ 29.385075][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.416198][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.437412][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.444602][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.452041][ T3308] bridge_slave_0: entered allmulticast mode [ 29.458395][ T3308] bridge_slave_0: entered promiscuous mode [ 29.466190][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.480960][ T3299] team0: Port device team_slave_0 added [ 29.486685][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.498226][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.505350][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.512559][ T3308] bridge_slave_1: entered allmulticast mode [ 29.519009][ T3308] bridge_slave_1: entered promiscuous mode [ 29.534406][ T3299] team0: Port device team_slave_1 added [ 29.542402][ T3300] hsr_slave_0: entered promiscuous mode [ 29.548626][ T3300] hsr_slave_1: entered promiscuous mode [ 29.585711][ T3306] team0: Port device team_slave_0 added [ 29.596644][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.603715][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.629715][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.645275][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.655129][ T3306] team0: Port device team_slave_1 added [ 29.666238][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.673244][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.699224][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.713239][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.752005][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.759035][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.785020][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.807884][ T3308] team0: Port device team_slave_0 added [ 29.820016][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.827066][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.853045][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.863872][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.871030][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.878313][ T3307] bridge_slave_0: entered allmulticast mode [ 29.884706][ T3307] bridge_slave_0: entered promiscuous mode [ 29.891582][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.898722][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.906020][ T3307] bridge_slave_1: entered allmulticast mode [ 29.912628][ T3307] bridge_slave_1: entered promiscuous mode [ 29.925626][ T3308] team0: Port device team_slave_1 added [ 29.960406][ T3299] hsr_slave_0: entered promiscuous mode [ 29.966673][ T3299] hsr_slave_1: entered promiscuous mode [ 29.972746][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 29.978498][ T3299] Cannot create hsr debugfs directory [ 30.003454][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.026277][ T3306] hsr_slave_0: entered promiscuous mode [ 30.032423][ T3306] hsr_slave_1: entered promiscuous mode [ 30.038222][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 30.044030][ T3306] Cannot create hsr debugfs directory [ 30.052472][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.059591][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.085648][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.097532][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.124414][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.131396][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.157347][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.178326][ T3307] team0: Port device team_slave_0 added [ 30.185164][ T3307] team0: Port device team_slave_1 added [ 30.240414][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.247532][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.273516][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.286067][ T3308] hsr_slave_0: entered promiscuous mode [ 30.293184][ T3308] hsr_slave_1: entered promiscuous mode [ 30.299111][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.304885][ T3308] Cannot create hsr debugfs directory [ 30.323197][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.330193][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.356197][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.436641][ T3307] hsr_slave_0: entered promiscuous mode [ 30.442922][ T3307] hsr_slave_1: entered promiscuous mode [ 30.448835][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 30.454835][ T3307] Cannot create hsr debugfs directory [ 30.477614][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.500948][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.516268][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.539861][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.548835][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.564388][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.573227][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.584247][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.619330][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.628469][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.651434][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.660242][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.708877][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.719698][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.733526][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.742721][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.780328][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.797395][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.807207][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.816667][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.838505][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.847591][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.876578][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.889546][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.898776][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.914227][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921341][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.934482][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.941594][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.955080][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.962193][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.985177][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.001483][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.008853][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.023269][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.030361][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.039243][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.046335][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.087464][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.100479][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.110955][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.155625][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.182748][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.197356][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.204489][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.220981][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.234298][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.246885][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.254085][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.271649][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.278806][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.297595][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.318216][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.330352][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337572][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.364222][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.436451][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.536303][ T3300] veth0_vlan: entered promiscuous mode [ 31.555492][ T3300] veth1_vlan: entered promiscuous mode [ 31.579249][ T3306] veth0_vlan: entered promiscuous mode [ 31.596685][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.614909][ T3306] veth1_vlan: entered promiscuous mode [ 31.622987][ T3299] veth0_vlan: entered promiscuous mode [ 31.634590][ T3300] veth0_macvtap: entered promiscuous mode [ 31.644386][ T3300] veth1_macvtap: entered promiscuous mode [ 31.653863][ T3299] veth1_vlan: entered promiscuous mode [ 31.675244][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.688766][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.701084][ T3306] veth0_macvtap: entered promiscuous mode [ 31.716548][ T3308] veth0_vlan: entered promiscuous mode [ 31.724103][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.732910][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.741719][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.751043][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.766448][ T3299] veth0_macvtap: entered promiscuous mode [ 31.777665][ T3306] veth1_macvtap: entered promiscuous mode [ 31.789176][ T3299] veth1_macvtap: entered promiscuous mode [ 31.799691][ T3308] veth1_vlan: entered promiscuous mode [ 31.813710][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.827011][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.827027][ T29] audit: type=1400 audit(1753873162.014:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.vIxVek/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.829546][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.848315][ T29] audit: type=1400 audit(1753873162.034:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.877621][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.886688][ T29] audit: type=1400 audit(1753873162.034:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.vIxVek/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.901470][ T3307] veth0_vlan: entered promiscuous mode [ 31.919189][ T29] audit: type=1400 audit(1753873162.034:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.929607][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.946591][ T29] audit: type=1400 audit(1753873162.034:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.vIxVek/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.969832][ T3308] veth0_macvtap: entered promiscuous mode [ 31.980434][ T29] audit: type=1400 audit(1753873162.034:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.vIxVek/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.991876][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.013499][ T29] audit: type=1400 audit(1753873162.034:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.022307][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.051005][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.052291][ T29] audit: type=1400 audit(1753873162.244:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.059904][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.082450][ T29] audit: type=1400 audit(1753873162.244:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.117082][ T3307] veth1_vlan: entered promiscuous mode [ 32.117430][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.131409][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.146019][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.154789][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.163543][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.178848][ T3308] veth1_macvtap: entered promiscuous mode [ 32.179749][ T29] audit: type=1400 audit(1753873162.364:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.224591][ C0] hrtimer: interrupt took 27373 ns [ 32.269202][ T3307] veth0_macvtap: entered promiscuous mode [ 32.281018][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.293431][ T3307] veth1_macvtap: entered promiscuous mode [ 32.315322][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.315538][ T3470] loop2: detected capacity change from 0 to 1024 [ 32.329882][ T3467] sit0: entered allmulticast mode [ 32.335520][ T3470] ======================================================= [ 32.335520][ T3470] WARNING: The mand mount option has been deprecated and [ 32.335520][ T3470] and is ignored by this kernel. Remove the mand [ 32.335520][ T3470] option from the mount to silence this warning. [ 32.335520][ T3470] ======================================================= [ 32.383258][ T3470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.397065][ T3470] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.400964][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.429592][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.443219][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.452105][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460912][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.469639][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.488728][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.497778][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.506687][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.515746][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.564141][ T3477] process 'syz.1.2' launched '/dev/fd/8' with NULL argv: empty string added [ 32.578035][ T3477] loop1: detected capacity change from 0 to 512 [ 32.599730][ T3480] netlink: zone id is out of range [ 32.613560][ T3480] netlink: zone id is out of range [ 32.622361][ T3477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.635581][ T3480] netlink: zone id is out of range [ 32.637970][ T3477] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.659473][ T3480] netlink: zone id is out of range [ 32.687262][ T3487] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.700222][ T3479] lo speed is unknown, defaulting to 1000 [ 32.702767][ T3480] netlink: zone id is out of range [ 32.702873][ T3480] netlink: zone id is out of range [ 32.702890][ T3480] netlink: zone id is out of range [ 32.702973][ T3480] netlink: zone id is out of range [ 32.702993][ T3480] netlink: zone id is out of range [ 32.703015][ T3480] netlink: zone id is out of range [ 32.783592][ T3489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.790180][ T3479] lo speed is unknown, defaulting to 1000 [ 32.818016][ T3477] tipc: Started in network mode [ 32.823043][ T3477] tipc: Node identity 7670197adc27, cluster identity 4711 [ 32.830324][ T3477] tipc: Enabled bearer , priority 0 [ 32.861882][ T3477] tipc: Resetting bearer [ 32.881974][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.892805][ T3477] tipc: Disabling bearer [ 32.920923][ T3479] lo speed is unknown, defaulting to 1000 [ 32.953214][ T3479] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.988067][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.006796][ T3479] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 33.051330][ T3494] syz.0.7 (3494) used greatest stack depth: 10792 bytes left [ 33.073407][ T3498] mmap: syz.2.8 (3498) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.119249][ T3479] lo speed is unknown, defaulting to 1000 [ 33.185314][ T3479] lo speed is unknown, defaulting to 1000 [ 33.196769][ T3479] lo speed is unknown, defaulting to 1000 [ 33.207179][ T3479] lo speed is unknown, defaulting to 1000 [ 33.245502][ T3505] loop2: detected capacity change from 0 to 1024 [ 34.198988][ T3479] lo speed is unknown, defaulting to 1000 [ 34.248625][ T3505] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 34.264919][ T3512] loop3: detected capacity change from 0 to 512 [ 34.272160][ T3510] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 34.430592][ T3512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.445913][ T3505] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.462911][ T3507] lo speed is unknown, defaulting to 1000 [ 34.468725][ T3507] lo speed is unknown, defaulting to 1000 [ 34.474936][ T3507] lo speed is unknown, defaulting to 1000 [ 34.481718][ T3507] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 34.506887][ T3512] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11: bg 0: block 131: padding at end of block bitmap is not set [ 34.514873][ T3505] EXT4-fs (loop2): invalid journal inode [ 34.521863][ T3507] lo speed is unknown, defaulting to 1000 [ 34.533328][ T3507] lo speed is unknown, defaulting to 1000 [ 34.539814][ T3507] lo speed is unknown, defaulting to 1000 [ 34.545947][ T3507] lo speed is unknown, defaulting to 1000 [ 34.552063][ T3507] lo speed is unknown, defaulting to 1000 [ 34.568520][ T3512] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 34.593368][ T3515] Cannot find set identified by id 0 to match [ 34.618090][ T3512] EXT4-fs (loop3): 1 truncate cleaned up [ 34.628183][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.650439][ T3479] syz.4.6 (3479) used greatest stack depth: 10568 bytes left [ 34.653356][ T3496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 34.658882][ T3518] vlan0: entered promiscuous mode [ 34.791043][ T3520] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 34.818237][ T3524] loop4: detected capacity change from 0 to 1024 [ 34.876692][ T3524] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 34.889759][ T3524] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.902490][ T3524] EXT4-fs (loop4): invalid journal inode [ 34.918011][ T3520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 35.163800][ T3527] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 35.173600][ T3520] syz.4.14 (3520) used greatest stack depth: 10440 bytes left [ 35.389397][ T3534] loop1: detected capacity change from 0 to 2048 [ 35.401569][ T3533] SELinux: failed to load policy [ 35.411267][ T3534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.442287][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.644692][ T3299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 35.688163][ T3299] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 35.711072][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 35.734610][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.746527][ T3541] loop3: detected capacity change from 0 to 32768 [ 35.836928][ T3270] loop3: p1 p2 p3 < > [ 35.849722][ T3270] loop3: p1 size 242222080 extends beyond EOD, truncated [ 35.871422][ T3270] loop3: p2 start 4294967295 is beyond EOD, truncated [ 35.890747][ T3554] loop0: detected capacity change from 0 to 128 [ 35.899286][ T3541] loop3: p1 p2 p3 < > [ 35.910454][ T3541] loop3: p1 size 242222080 extends beyond EOD, truncated [ 35.951651][ T3541] loop3: p2 start 4294967295 is beyond EOD, truncated [ 36.050521][ T3556] loop4: detected capacity change from 0 to 8192 [ 36.078627][ T3556] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 36.149204][ T3562] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 36.230284][ T3548] udevd[3548]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.234188][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 36.250082][ T3562] loop3: detected capacity change from 0 to 2048 [ 36.329409][ T3553] syz.1.20 (3553) used greatest stack depth: 10232 bytes left [ 36.413777][ T3562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 36.415987][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 36.426849][ T3548] udevd[3548]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.445173][ T3569] loop1: detected capacity change from 0 to 1024 [ 36.531362][ T3570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.539869][ T3570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.558726][ T3570] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 36.738300][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 36.832436][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 36.832452][ T29] audit: type=1326 audit(1754397455.024:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffa42bce9a9 code=0x7ffc0000 [ 36.861904][ T29] audit: type=1400 audit(1754397455.024:679): avc: denied { bind } for pid=3573 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.904928][ T29] audit: type=1326 audit(1754397455.062:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 36.928276][ T29] audit: type=1326 audit(1754397455.062:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 36.951480][ T29] audit: type=1326 audit(1754397455.062:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 36.974943][ T29] audit: type=1326 audit(1754397455.062:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 36.998282][ T29] audit: type=1326 audit(1754397455.062:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 37.021532][ T29] audit: type=1326 audit(1754397455.062:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 37.030838][ T3578] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.044714][ T29] audit: type=1326 audit(1754397455.062:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 37.079817][ T29] audit: type=1326 audit(1754397455.062:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 37.155506][ T3581] bond1: entered promiscuous mode [ 37.160713][ T3581] bond1: entered allmulticast mode [ 37.166590][ T3581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.178164][ T3581] bond1 (unregistering): Released all slaves [ 37.215580][ T3586] loop2: detected capacity change from 0 to 512 [ 37.222410][ T3586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.236232][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.250358][ T3586] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.321293][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.437838][ T3606] loop2: detected capacity change from 0 to 512 [ 37.444927][ T3607] Zero length message leads to an empty skb [ 37.452801][ T3606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.472040][ T3606] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.487389][ T3611] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 37.488876][ T3606] EXT4-fs (loop2): 1 truncate cleaned up [ 37.510012][ T3606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.515161][ T3611] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 37.547735][ T3611] syz.0.33 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.556167][ T3588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.567430][ T3588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.645173][ T3612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 37.664396][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 37.683664][ T3615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.694664][ T3615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.247316][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.292084][ T3617] lo speed is unknown, defaulting to 1000 [ 38.298791][ T3617] lo speed is unknown, defaulting to 1000 [ 38.342512][ T3619] lo speed is unknown, defaulting to 1000 [ 38.350090][ T3619] lo speed is unknown, defaulting to 1000 [ 38.401299][ T3620] netlink: 'syz.2.34': attribute type 6 has an invalid length. [ 38.418493][ T3617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34'. [ 38.535438][ T3632] netlink: 'syz.2.36': attribute type 8 has an invalid length. [ 38.554647][ T3632] loop2: detected capacity change from 0 to 512 [ 38.586384][ T3632] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.601514][ T3632] EXT4-fs (loop2): mount failed [ 38.619234][ T3630] loop1: detected capacity change from 0 to 1024 [ 38.641943][ T3630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.654661][ T3632] loop2: detected capacity change from 0 to 2048 [ 38.681030][ T3630] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.35: Allocating blocks 497-513 which overlap fs metadata [ 38.695463][ T3630] EXT4-fs (loop1): pa ffff888106e88540: logic 256, phys. 385, len 8 [ 38.704015][ T3630] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 38.715150][ T3548] Alternate GPT is invalid, using primary GPT. [ 38.721582][ T3548] loop2: p1 p2 p3 [ 38.735353][ T3632] Alternate GPT is invalid, using primary GPT. [ 38.741731][ T3632] loop2: p1 p2 p3 [ 39.233590][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.320446][ T3641] No such timeout policy "syz0" [ 39.409781][ T3644] xt_hashlimit: size too large, truncated to 1048576 [ 39.416572][ T3644] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 40.202967][ T3656] loop1: detected capacity change from 0 to 512 [ 40.210771][ T3656] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.217573][ T3656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.243045][ T3656] EXT4-fs (loop1): 1 truncate cleaned up [ 40.250248][ T3656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.473988][ T3660] loop4: detected capacity change from 0 to 512 [ 40.534496][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.607690][ T3660] loop4: detected capacity change from 0 to 512 [ 40.697097][ T3660] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 40.779242][ T3667] x_tables: duplicate underflow at hook 4 [ 40.830037][ T3660] loop4: detected capacity change from 0 to 8192 [ 40.901309][ T3670] lo speed is unknown, defaulting to 1000 [ 40.929436][ T3670] lo speed is unknown, defaulting to 1000 [ 41.218851][ T3681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 41.239490][ T3681] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 41.247424][ T3682] loop1: detected capacity change from 0 to 512 [ 41.253340][ T3681] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.265967][ T3682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.281506][ T3682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.394550][ T3685] loop3: detected capacity change from 0 to 2048 [ 41.412112][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.428037][ T3685] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.439631][ T3685] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 41.446338][ T3685] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.454138][ T3685] vhci_hcd vhci_hcd.0: Device attached [ 41.461554][ T3688] vhci_hcd: cannot find the pending unlink 1 [ 41.467856][ T3688] vhci_hcd: connection closed [ 41.468817][ T56] vhci_hcd: stop threads [ 41.477858][ T56] vhci_hcd: release socket [ 41.482304][ T56] vhci_hcd: disconnect device [ 41.626902][ T3695] xt_hashlimit: max too large, truncated to 1048576 [ 41.901504][ T29] kauditd_printk_skb: 1046 callbacks suppressed [ 41.901518][ T29] audit: type=1400 audit(1754397460.059:1733): avc: denied { remove_name } for pid=3716 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=1204 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.931398][ T29] audit: type=1400 audit(1754397460.059:1734): avc: denied { unlink } for pid=3716 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=1204 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.968654][ T3699] Falling back ldisc for ttyS3. [ 41.995773][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.024514][ T3724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.052011][ T3727] netlink: 'syz.3.56': attribute type 12 has an invalid length. [ 42.076886][ T3724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.093896][ T3727] loop8: detected capacity change from 0 to 16384 [ 42.115552][ T3724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.212281][ T3724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.278408][ T29] audit: type=1400 audit(1754397460.456:1735): avc: denied { mount } for pid=3738 comm="syz.4.57" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.300311][ T29] audit: type=1400 audit(1754397460.456:1736): avc: denied { mounton } for pid=3738 comm="syz.4.57" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 42.329372][ T29] audit: type=1400 audit(1754397460.510:1737): avc: denied { create } for pid=3738 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.349682][ T29] audit: type=1400 audit(1754397460.510:1738): avc: denied { write } for pid=3738 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.369739][ T29] audit: type=1400 audit(1754397460.510:1739): avc: denied { nlmsg_write } for pid=3738 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.527007][ T3735] loop8: detected capacity change from 16384 to 16383 [ 42.613265][ T3724] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.683557][ T3724] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.727766][ T3724] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.770867][ T3724] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.803430][ T29] audit: type=1400 audit(1754397461.025:1740): avc: denied { append } for pid=3753 comm="syz.2.59" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.834508][ T3754] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.59' sets config #1 [ 42.873271][ T3749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.891080][ T3754] loop2: detected capacity change from 0 to 512 [ 42.904150][ T3749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.931233][ T3754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.955917][ T3754] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.987349][ T3749] loop0: detected capacity change from 0 to 8192 [ 43.001482][ T29] audit: type=1400 audit(1754397461.240:1741): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.049020][ T29] audit: type=1400 audit(1754397461.240:1742): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.097929][ T3761] loop1: detected capacity change from 0 to 1024 [ 43.106534][ T3761] EXT4-fs: Ignoring removed orlov option [ 43.127589][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.157230][ T3759] loop4: detected capacity change from 0 to 4096 [ 43.164462][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 43.179687][ T3765] loop3: detected capacity change from 0 to 512 [ 43.186719][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.200058][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 43.222771][ T3759] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.61: corrupted inode contents [ 43.243994][ T3759] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #15: comm syz.4.61: mark_inode_dirty error [ 43.258132][ T3759] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.61: corrupted inode contents [ 43.259218][ T3765] EXT4-fs (loop3): too many log groups per flexible block group [ 43.277671][ T3765] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 43.285899][ T3771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 43.292995][ T3759] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.61: mark_inode_dirty error [ 43.302478][ T3765] EXT4-fs (loop3): mount failed [ 43.317728][ T3759] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.61: corrupted inode contents [ 43.336740][ T3759] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.61: mark_inode_dirty error [ 43.362911][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 43.366380][ T3759] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.61: corrupted inode contents [ 43.383644][ T3765] loop3: detected capacity change from 0 to 2048 [ 43.387782][ T3759] EXT4-fs error (device loop4): ext4_truncate:4592: inode #15: comm syz.4.61: mark_inode_dirty error [ 43.408749][ T3759] EXT4-fs error (device loop4) in ext4_setattr:5981: Corrupt filesystem [ 43.434744][ T3765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.457696][ T3759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.492361][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.650605][ T3785] lo speed is unknown, defaulting to 1000 [ 43.656901][ T3785] lo speed is unknown, defaulting to 1000 [ 43.726034][ T3788] netlink: 'syz.4.63': attribute type 1 has an invalid length. [ 43.733779][ T3788] netlink: 224 bytes leftover after parsing attributes in process `syz.4.63'. [ 43.746867][ T3786] loop0: detected capacity change from 0 to 2048 [ 43.764720][ T3789] loop3: detected capacity change from 0 to 512 [ 43.795267][ T3516] loop0: p1 < > p4 [ 43.809899][ T3789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.877428][ T3516] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.964568][ T3789] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.135440][ T3797] netlink: 27 bytes leftover after parsing attributes in process `syz.0.65'. [ 44.179335][ T3785] bridge0: port 3(syz_tun) entered blocking state [ 44.185866][ T3785] bridge0: port 3(syz_tun) entered disabled state [ 44.193239][ T3785] syz_tun: entered allmulticast mode [ 44.198228][ T3786] loop0: p1 < > p4 [ 44.200245][ T3785] syz_tun: entered promiscuous mode [ 44.203988][ T3786] loop0: p4 size 8388608 extends beyond EOD, truncated [ 44.208135][ T3785] bridge0: port 3(syz_tun) entered blocking state [ 44.221114][ T3785] bridge0: port 3(syz_tun) entered forwarding state [ 44.237041][ T3789] syz_tun: left allmulticast mode [ 44.242255][ T3789] syz_tun: left promiscuous mode [ 44.247446][ T3789] bridge0: port 3(syz_tun) entered disabled state [ 44.264437][ T3789] bond0: (slave dummy0): Releasing backup interface [ 44.367568][ T3789] bridge_slave_0: left allmulticast mode [ 44.373307][ T3789] bridge_slave_0: left promiscuous mode [ 44.379229][ T3789] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.389198][ T3799] loop4: detected capacity change from 0 to 164 [ 44.397436][ T3789] bridge_slave_1: left allmulticast mode [ 44.403242][ T3789] bridge_slave_1: left promiscuous mode [ 44.409091][ T3789] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.437974][ T3789] bond0: (slave bond_slave_0): Releasing backup interface [ 44.443228][ T2992] loop0: p1 < > p4 [ 44.455184][ T3789] bond0: (slave bond_slave_1): Releasing backup interface [ 44.455379][ T2992] loop0: p4 size 8388608 extends beyond EOD, truncated [ 44.476819][ T3789] team0: Port device team_slave_0 removed [ 44.503900][ T3789] team0: Port device team_slave_1 removed [ 44.516413][ T3789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.524007][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.534534][ T3789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.542058][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.631701][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.652729][ T3548] udevd[3548]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.664244][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.729680][ T3799] rock: directory entry would overflow storage [ 44.735935][ T3799] rock: sig=0x4f50, size=4, remaining=3 [ 44.741620][ T3799] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.164880][ T3823] loop4: detected capacity change from 0 to 1764 [ 45.176955][ T3823] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 45.227972][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 45.237781][ T3823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.71'. [ 45.451010][ T3831] siw: device registration error -23 [ 45.711212][ T3839] netlink: 184 bytes leftover after parsing attributes in process `syz.0.74'. [ 45.776437][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.789911][ T3839] lo speed is unknown, defaulting to 1000 [ 45.801787][ T3839] lo speed is unknown, defaulting to 1000 [ 45.809800][ T3843] loop0: detected capacity change from 0 to 1024 [ 45.820676][ T3843] EXT4-fs: Ignoring removed orlov option [ 45.826419][ T3843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.857887][ T3843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.980048][ T3851] loop2: detected capacity change from 0 to 1024 [ 45.990114][ T3851] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 46.000009][ T3851] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 46.013110][ T3851] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 46.023750][ T3851] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.76: unexpected bad inode w/o EXT4_IGET_BAD [ 46.044299][ T3851] EXT4-fs (loop2): no journal found [ 46.049605][ T3851] EXT4-fs (loop2): can't get journal size [ 46.057898][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.109711][ T3857] loop4: detected capacity change from 0 to 736 [ 46.151686][ T3859] __nla_validate_parse: 1 callbacks suppressed [ 46.151709][ T3859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.166784][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.236302][ T3862] loop3: detected capacity change from 0 to 512 [ 46.252103][ T3862] EXT4-fs: Ignoring removed oldalloc option [ 46.258374][ T3862] EXT4-fs: inline encryption not supported [ 46.264565][ T3862] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.278242][ T3862] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.306928][ T3862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.77: bg 0: block 64: padding at end of block bitmap is not set [ 46.322677][ T3862] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.77: Failed to acquire dquot type 0 [ 46.334140][ T3862] EXT4-fs (loop3): 1 truncate cleaned up [ 46.340297][ T3862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.453563][ T3866] lo speed is unknown, defaulting to 1000 [ 46.460238][ T3866] lo speed is unknown, defaulting to 1000 [ 46.639604][ T3866] loop4: detected capacity change from 0 to 512 [ 46.662958][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.675719][ T3866] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.707923][ T3839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.835047][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 46.835066][ T29] audit: type=1326 audit(1754397465.327:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fc9420774 code=0x7ffc0000 [ 46.864600][ T29] audit: type=1326 audit(1754397465.327:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8fc9420774 code=0x7ffc0000 [ 46.884895][ T3862] syz.3.77 (3862) used greatest stack depth: 9160 bytes left [ 46.887911][ T29] audit: type=1326 audit(1754397465.327:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fc941d60a code=0x7ffc0000 [ 46.918388][ T29] audit: type=1326 audit(1754397465.327:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 46.941711][ T29] audit: type=1326 audit(1754397465.327:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 47.020778][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.070357][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.079901][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.183647][ T3877] loop4: detected capacity change from 0 to 1024 [ 47.246421][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.384292][ T3877] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.81: Allocating blocks 449-513 which overlap fs metadata [ 47.422474][ T29] audit: type=1400 audit(1754397465.971:2437): avc: denied { execute } for pid=3875 comm="syz.4.81" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.488144][ T3875] EXT4-fs (loop4): pa ffff888100560070: logic 48, phys. 177, len 21 [ 47.496265][ T3875] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 47.519947][ T29] audit: type=1400 audit(1754397466.089:2438): avc: denied { rmdir } for pid=3300 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.555980][ T29] audit: type=1400 audit(1754397466.111:2439): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 47.631683][ T3889] loop3: detected capacity change from 0 to 1024 [ 47.650513][ T3889] ext4: Unknown parameter 'uid' [ 47.669344][ T3886] siw: device registration error -23 [ 47.685860][ T29] audit: type=1326 audit(1754397466.261:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 47.710001][ T29] audit: type=1326 audit(1754397466.261:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 47.808597][ T339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.843991][ T339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.892930][ T339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.957927][ T339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.992468][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.074183][ T3896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 48.096517][ T339] bridge_slave_1: left allmulticast mode [ 48.102260][ T339] bridge_slave_1: left promiscuous mode [ 48.108101][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.117065][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 48.128180][ T339] bridge_slave_0: left allmulticast mode [ 48.134094][ T339] bridge_slave_0: left promiscuous mode [ 48.139861][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.181505][ T3896] loop1: detected capacity change from 0 to 1024 [ 48.213414][ T3896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.247338][ T3896] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.317934][ T3898] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 48.325658][ T3898] netlink: 224 bytes leftover after parsing attributes in process `syz.1.87'. [ 48.455200][ T3851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.546777][ T3909] SELinux: failed to load policy [ 48.618251][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.660109][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.687937][ T339] bond0 (unregistering): Released all slaves [ 48.793167][ T339] hsr_slave_0: left promiscuous mode [ 48.852825][ T339] hsr_slave_1: left promiscuous mode [ 48.860168][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.867674][ T339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.876477][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.883928][ T339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.904707][ T339] veth1_macvtap: left promiscuous mode [ 48.911029][ T339] veth0_macvtap: left promiscuous mode [ 48.918830][ T339] veth1_vlan: left promiscuous mode [ 48.924273][ T339] veth0_vlan: left promiscuous mode [ 49.007106][ T339] team0 (unregistering): Port device team_slave_1 removed [ 49.017023][ T339] team0 (unregistering): Port device team_slave_0 removed [ 49.060654][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 49.081331][ T3387] infiniband syz1: ib_query_port failed (-19) [ 49.088515][ T1038] lo speed is unknown, defaulting to 1000 [ 49.094423][ T1038] infiniband syz2: ib_query_port failed (-19) [ 49.162782][ T3891] lo speed is unknown, defaulting to 1000 [ 49.163762][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.197872][ T3935] bond0: entered promiscuous mode [ 49.203101][ T3935] bond0: entered allmulticast mode [ 49.230762][ T3935] loop3: detected capacity change from 0 to 1024 [ 49.306326][ T3940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.369639][ T3940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.401731][ T3891] chnl_net:caif_netlink_parms(): no params data found [ 49.412693][ T3955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 49.449677][ T3940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.500179][ T3964] loop1: detected capacity change from 0 to 764 [ 49.516111][ T3964] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 49.538935][ T3940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.573047][ T3964] SELinux: ebitmap: truncated map [ 49.578419][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.578905][ T3964] SELinux: failed to load policy [ 49.585626][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.608138][ T3891] bridge_slave_0: entered allmulticast mode [ 49.616370][ T3891] bridge_slave_0: entered promiscuous mode [ 49.647253][ T3940] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.660762][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.668104][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.677754][ T3891] bridge_slave_1: entered allmulticast mode [ 49.703797][ T3891] bridge_slave_1: entered promiscuous mode [ 49.716192][ T3940] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.736725][ T3940] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.745185][ T3961] loop3: detected capacity change from 0 to 8192 [ 49.762772][ T3940] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.778895][ T3891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.793634][ T3891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.803892][ T3516] loop3: p1 p4 < > [ 49.809276][ T3516] loop3: p1 start 4261412864 is beyond EOD, truncated [ 49.840557][ T3961] loop3: p1 p4 < > [ 49.851043][ T3961] loop3: p1 start 4261412864 is beyond EOD, truncated [ 49.856924][ T3891] team0: Port device team_slave_0 added [ 49.887402][ T3891] team0: Port device team_slave_1 added [ 49.888054][ T3986] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 49.899685][ T3986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.907297][ T3986] vhci_hcd vhci_hcd.0: Device attached [ 49.934585][ T3986] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 49.941254][ T3986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.949002][ T3986] vhci_hcd vhci_hcd.0: Device attached [ 49.959628][ T3891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.961115][ T3986] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 49.966692][ T3891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.973301][ T3986] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.999471][ T3891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.007168][ T3986] vhci_hcd vhci_hcd.0: Device attached [ 50.090142][ T3986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 50.132497][ T3986] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 50.139175][ T3986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.147271][ T3986] vhci_hcd vhci_hcd.0: Device attached [ 50.152931][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 50.153516][ T3891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.167311][ T3891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.193338][ T3891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.209172][ T3999] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(25) [ 50.215855][ T3999] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.223693][ T3999] vhci_hcd vhci_hcd.0: Device attached [ 50.241924][ T3986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 50.267416][ T3986] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(30) [ 50.274270][ T3986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.281983][ T3986] vhci_hcd vhci_hcd.0: Device attached [ 50.307330][ T3999] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 50.330082][ T3999] vhci_hcd vhci_hcd.0: port 0 already used [ 50.364840][ T3996] vhci_hcd: connection closed [ 50.365025][ T4000] vhci_hcd: connection closed [ 50.370287][ T3992] vhci_hcd: connection closed [ 50.375371][ T3987] vhci_hcd: connection reset by peer [ 50.385759][ T3989] vhci_hcd: connection closed [ 50.458154][ T88] vhci_hcd: stop threads [ 50.467329][ T88] vhci_hcd: release socket [ 50.471847][ T88] vhci_hcd: disconnect device [ 50.490150][ T88] vhci_hcd: stop threads [ 50.494475][ T88] vhci_hcd: release socket [ 50.499082][ T88] vhci_hcd: disconnect device [ 50.507471][ T4009] loop3: detected capacity change from 0 to 256 [ 50.541701][ T4009] vfat: Unknown parameter 'shorname' [ 50.574742][ T3891] hsr_slave_0: entered promiscuous mode [ 50.581348][ T3891] hsr_slave_1: entered promiscuous mode [ 50.588092][ T4013] 9pnet_fd: Insufficient options for proto=fd [ 50.640018][ T88] vhci_hcd: stop threads [ 50.644325][ T88] vhci_hcd: release socket [ 50.648872][ T88] vhci_hcd: disconnect device [ 50.715391][ T4013] lo speed is unknown, defaulting to 1000 [ 50.936608][ T88] vhci_hcd: stop threads [ 50.940912][ T88] vhci_hcd: release socket [ 50.945498][ T88] vhci_hcd: disconnect device [ 51.010578][ T88] vhci_hcd: stop threads [ 51.014957][ T88] vhci_hcd: release socket [ 51.019526][ T88] vhci_hcd: disconnect device [ 51.191288][ T4030] SELinux: Context Y7j [ 51.191288][ T4030] u/$2Sٟ2'ks2- vjd #,N< [ 51.191288][ T4030] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 51.234077][ T4003] vhci_hcd: connection closed [ 51.237986][ T3891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.253318][ T37] vhci_hcd: stop threads [ 51.257723][ T37] vhci_hcd: release socket [ 51.262235][ T37] vhci_hcd: disconnect device [ 51.297696][ T4034] loop0: detected capacity change from 0 to 128 [ 51.325167][ T3891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.345052][ T4034] netlink: 'syz.0.101': attribute type 39 has an invalid length. [ 51.346390][ T3891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.361886][ T4030] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 51.401998][ T4030] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i&Zw8 lX&D;td BIݛ~L [ 51.488568][ T4030] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 51.516316][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 51.527854][ T4030] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 51.540758][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 51.540788][ T29] audit: type=1326 audit(1754397470.391:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.575287][ T29] audit: type=1326 audit(1754397470.434:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.598733][ T29] audit: type=1326 audit(1754397470.434:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.622210][ T29] audit: type=1326 audit(1754397470.434:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.645983][ T29] audit: type=1326 audit(1754397470.499:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.648274][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 51.669365][ T29] audit: type=1326 audit(1754397470.499:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.698848][ T29] audit: type=1326 audit(1754397470.499:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.724920][ T4044] loop0: detected capacity change from 0 to 512 [ 51.738685][ T4044] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.750448][ T4044] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.101: Invalid block bitmap block 0 in block_group 0 [ 51.750492][ T4038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.765245][ T4044] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.772048][ T4038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.784073][ T29] audit: type=1326 audit(1754397470.563:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.811238][ T29] audit: type=1326 audit(1754397470.563:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.834662][ T29] audit: type=1326 audit(1754397470.563:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 51.859129][ T4038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.866600][ T4038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.876533][ T4044] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.101: attempt to clear invalid blocks 983261 len 1 [ 51.892811][ T4044] EXT4-fs error (device loop0): __ext4_get_inode_loc:4787: comm syz.0.101: Invalid inode table block 0 in block_group 0 [ 51.907593][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 51.935620][ T4044] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 51.955785][ T4031] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.970314][ T4044] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 51.992295][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 52.000539][ T4044] EXT4-fs error (device loop0): __ext4_get_inode_loc:4787: comm syz.0.101: Invalid inode table block 0 in block_group 0 [ 52.020495][ T3891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.037138][ T4044] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 52.047685][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 52.077147][ T4044] EXT4-fs error (device loop0): ext4_truncate:4592: inode #11: comm syz.0.101: mark_inode_dirty error [ 52.090122][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 52.096699][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 52.112142][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 52.117184][ T3891] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.120241][ T4044] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 52.148804][ T4044] EXT4-fs error (device loop0): __ext4_get_inode_loc:4787: comm syz.0.101: Invalid inode table block 0 in block_group 0 [ 52.174436][ T4057] hsr_slave_0 (unregistering): left promiscuous mode [ 52.175638][ T4056] loop3: detected capacity change from 0 to 8192 [ 52.194098][ T4044] EXT4-fs (loop0): 1 truncate cleaned up [ 52.200092][ T4031] dummy0 speed is unknown, defaulting to 1000 [ 52.208020][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.215263][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.234221][ T4044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.300913][ T4065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.331312][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.338666][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.345915][ T4056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 52.345987][ T4056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 52.400362][ T4072] netlink: 9 bytes leftover after parsing attributes in process `syz.3.104'. [ 52.467518][ T4065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.483767][ T4072] 0: renamed from hsr0 (while UP) [ 52.491071][ T4072] 0: entered allmulticast mode [ 52.496057][ T4072] hsr_slave_0: entered allmulticast mode [ 52.501829][ T4072] hsr_slave_1: entered allmulticast mode [ 52.526972][ T4072] net_ratelimit: 42 callbacks suppressed [ 52.526992][ T4072] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 52.554680][ T3891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.565199][ T3891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.610265][ T4065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.673098][ T4065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.704388][ T4096] 9pnet_fd: Insufficient options for proto=fd [ 52.724859][ T3891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.739524][ T4065] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.783290][ T4065] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.813310][ T4065] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.824735][ T4106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 52.848129][ T4065] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.859826][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 52.951479][ T4096] tipc: Started in network mode [ 52.956471][ T4096] tipc: Node identity f2ee05cf10ac, cluster identity 4711 [ 52.963758][ T4096] tipc: Enabled bearer , priority 0 [ 53.022795][ T4102] tipc: Disabling bearer [ 53.146474][ T3891] veth0_vlan: entered promiscuous mode [ 53.154994][ T3891] veth1_vlan: entered promiscuous mode [ 53.169836][ T3891] veth0_macvtap: entered promiscuous mode [ 53.182730][ T3891] veth1_macvtap: entered promiscuous mode [ 53.197789][ T3891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.467166][ T4148] netlink: 'syz.3.109': attribute type 7 has an invalid length. [ 53.475089][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 53.492003][ T3891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.623721][ T3891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.632600][ T3891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.641359][ T3891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.650335][ T3891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.708379][ T4148] loop3: detected capacity change from 0 to 512 [ 53.766082][ T4148] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 53.776453][ T4148] EXT4-fs (loop3): group descriptors corrupted! [ 53.958691][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 53.967692][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 53.987385][ T4166] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 54.082385][ T4178] loop3: detected capacity change from 0 to 512 [ 54.110601][ T4178] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 54.130706][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.138320][ T4178] EXT4-fs (loop3): invalid journal inode [ 54.148716][ T4178] EXT4-fs (loop3): can't get journal size [ 54.168563][ T4178] EXT4-fs (loop3): 1 truncate cleaned up [ 54.183883][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.226137][ T4178] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.113: bg 0: block 255: padding at end of block bitmap is not set [ 54.247797][ T4178] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.265286][ T4192] loop5: detected capacity change from 0 to 128 [ 54.293630][ T4187] loop0: detected capacity change from 0 to 8192 [ 54.320963][ T4192] syz.5.117: attempt to access beyond end of device [ 54.320963][ T4192] loop5: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 54.334486][ T4192] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 54.348968][ T4192] syz.5.117: attempt to access beyond end of device [ 54.348968][ T4192] loop5: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 54.362472][ T4192] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 54.408915][ T4192] syz.5.117: attempt to access beyond end of device [ 54.408915][ T4192] loop5: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 54.422347][ T4192] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 54.431042][ T4192] syz.5.117: attempt to access beyond end of device [ 54.431042][ T4192] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 54.444411][ T4192] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 54.453218][ T4192] syz.5.117: attempt to access beyond end of device [ 54.453218][ T4192] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 54.466617][ T4192] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 54.476319][ T4200] netlink: 'syz.5.117': attribute type 21 has an invalid length. [ 54.499976][ T4192] syz.5.117: attempt to access beyond end of device [ 54.499976][ T4192] loop5: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 54.513394][ T4192] Buffer I/O error on dev loop5, logical block 134, lost async page write [ 54.521444][ T4200] netlink: 'syz.5.117': attribute type 1 has an invalid length. [ 54.530323][ T4192] syz.5.117: attempt to access beyond end of device [ 54.530323][ T4192] loop5: rw=2049, sector=137, nr_sectors = 1 limit=128 [ 54.543712][ T4192] Buffer I/O error on dev loop5, logical block 137, lost async page write [ 54.552393][ T4192] syz.5.117: attempt to access beyond end of device [ 54.552393][ T4192] loop5: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 54.565846][ T4192] Buffer I/O error on dev loop5, logical block 138, lost async page write [ 54.576801][ T4192] syz.5.117: attempt to access beyond end of device [ 54.576801][ T4192] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 54.590253][ T4192] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 54.611129][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.627946][ T4192] syz.5.117: attempt to access beyond end of device [ 54.627946][ T4192] loop5: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 54.641491][ T4192] Buffer I/O error on dev loop5, logical block 148, lost async page write [ 54.751428][ T4206] netlink: 'syz.0.119': attribute type 27 has an invalid length. [ 54.859454][ T36] usb 1-1: enqueue for inactive port 0 [ 54.866795][ T36] usb 1-1: enqueue for inactive port 0 [ 54.978403][ T4214] loop1: detected capacity change from 0 to 512 [ 55.014889][ T36] vhci_hcd: vhci_device speed not set [ 55.032238][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.039572][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.067824][ T4214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.144579][ T4221] loop5: detected capacity change from 0 to 512 [ 55.169890][ T4221] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 55.178222][ T4221] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.193988][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.208131][ T4227] loop3: detected capacity change from 0 to 1024 [ 55.228730][ T4227] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.259287][ T4221] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.280618][ T4227] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.123: Invalid block bitmap block 0 in block_group 0 [ 55.288515][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.302307][ T4221] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 55.311376][ T4221] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.124: bg 0: block 40: padding at end of block bitmap is not set [ 55.334997][ T4227] EXT4-fs (loop3): Remounting filesystem read-only [ 55.341746][ T4227] EXT4-fs (loop3): 1 orphan inode deleted [ 55.348301][ T4221] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 55.360730][ T4221] EXT4-fs (loop5): 1 truncate cleaned up [ 55.369493][ T4227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.384536][ T4221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.452493][ T4206] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.461107][ T4206] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.469629][ T4206] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.478059][ T4206] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.498204][ T4241] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.124: corrupted xattr block 31: invalid header [ 55.524674][ T4241] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 55.633323][ T4241] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.124: corrupted xattr block 31: invalid header [ 55.670260][ T4241] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 55.681386][ T4241] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.124: bad symlink. [ 55.943999][ T4251] loop0: detected capacity change from 0 to 512 [ 56.046505][ T4251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.063590][ T4251] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.102838][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.119364][ T4255] loop2: detected capacity change from 0 to 512 [ 56.159074][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.186268][ T4255] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.197822][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.208863][ T4255] Cannot find add_set index 0 as target [ 56.218464][ T4255] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 56.219237][ T4251] ext4: Unknown parameter '00000010' [ 56.233789][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 56.233938][ T29] audit: type=1400 audit(1754397475.413:3165): avc: denied { remount } for pid=4248 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.278462][ T4255] EXT4-fs (loop2): Remounting filesystem read-only [ 56.357371][ T29] audit: type=1326 audit(1754397475.563:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.384679][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.406334][ T88] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 56.426683][ T29] audit: type=1326 audit(1754397475.563:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.438321][ T88] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 56.450931][ T29] audit: type=1326 audit(1754397475.563:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.486567][ T29] audit: type=1326 audit(1754397475.563:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.510640][ T29] audit: type=1326 audit(1754397475.563:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.534025][ T29] audit: type=1326 audit(1754397475.563:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.558220][ T29] audit: type=1326 audit(1754397475.563:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 56.756468][ T4270] loop2: detected capacity change from 0 to 4096 [ 56.826400][ T4259] Illegal XDP return value 160 on prog (id 136) dev N/A, expect packet loss! [ 56.846086][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.860585][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.881468][ T4259] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.937791][ T4270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.014291][ T4282] lo speed is unknown, defaulting to 1000 [ 57.020703][ T4282] dummy0 speed is unknown, defaulting to 1000 [ 57.234616][ T4277] __nla_validate_parse: 8 callbacks suppressed [ 57.234632][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.134'. [ 57.375096][ T3387] dummy0 speed is unknown, defaulting to 1000 [ 57.408323][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.418853][ T4287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.133'. [ 57.515650][ T3374] usb usb2-port1: attempt power cycle [ 57.587391][ T4293] loop1: detected capacity change from 0 to 512 [ 57.607024][ T4294] vlan2: entered allmulticast mode [ 57.607532][ T4293] /dev/loop1: Can't open blockdev [ 57.633964][ T4294] dummy0: entered allmulticast mode [ 57.657464][ T4293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.136'. [ 57.770181][ T4302] syz.5.137 uses obsolete (PF_INET,SOCK_PACKET) [ 57.789855][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.137'. [ 57.798129][ T4294] siw: device registration error -23 [ 57.871981][ T4302] infiniband syz1: set active [ 57.876803][ T4302] infiniband syz1: added syz_tun [ 57.909785][ T4302] RDS/IB: syz1: added [ 57.929492][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.985917][ T4302] smc: adding ib device syz1 with port count 1 [ 58.000220][ T4302] smc: ib device syz1 port 1 has pnetid [ 58.083647][ T4317] loop1: detected capacity change from 0 to 512 [ 58.094714][ T4317] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.140: inode #15: comm syz.1.140: iget: illegal inode # [ 58.266105][ T4317] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.140: couldn't read orphan inode 15 (err -117) [ 58.308739][ T4317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.420550][ T4314] loop0: detected capacity change from 0 to 512 [ 58.479440][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.580604][ T4314] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.624023][ T4305] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.636840][ T4329] vlan0: entered promiscuous mode [ 58.638942][ T4305] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 58.656470][ T4305] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.656470][ T4305] [ 58.666176][ T4305] EXT4-fs (loop0): Total free blocks count 0 [ 58.672238][ T4305] EXT4-fs (loop0): Free/Dirty block details [ 58.678241][ T4305] EXT4-fs (loop0): free_blocks=65280 [ 58.683588][ T4305] EXT4-fs (loop0): dirty_blocks=33 [ 58.688752][ T4305] EXT4-fs (loop0): Block reservation details [ 58.694855][ T4305] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 58.853969][ T4311] syz.3.139 (4311) used greatest stack depth: 7160 bytes left [ 58.928444][ T4338] loop5: detected capacity change from 0 to 512 [ 58.955906][ T4338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.124361][ T4330] loop2: detected capacity change from 0 to 2048 [ 59.169290][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.225670][ T4313] Set syz1 is full, maxelem 65536 reached [ 59.292735][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.306165][ T3374] usb usb2-port1: unable to enumerate USB device [ 59.326718][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.453340][ T3306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 59.454846][ T3306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 59.459318][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.514125][ T4359] loop2: detected capacity change from 0 to 512 [ 59.541592][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.581476][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 59.642397][ T4366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 59.762810][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.842167][ T4372] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.922380][ T4372] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.989675][ T4372] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.035883][ T4372] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.101474][ T4372] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.114420][ T4372] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.128227][ T4372] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.141364][ T4372] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.391379][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.459617][ T4389] lo speed is unknown, defaulting to 1000 [ 60.467209][ T4389] dummy0 speed is unknown, defaulting to 1000 [ 60.776895][ T4390] loop5: detected capacity change from 0 to 512 [ 60.844630][ T4390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.858000][ T4390] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.959178][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 60.959196][ T29] audit: type=1400 audit(1754397480.509:3424): avc: denied { name_connect } for pid=4401 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 61.038242][ T29] audit: type=1400 audit(1754397480.573:3425): avc: denied { listen } for pid=4401 comm="syz.2.156" lport=41484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.059833][ T29] audit: type=1400 audit(1754397480.573:3426): avc: denied { ioctl } for pid=4401 comm="syz.2.156" path="socket:[8243]" dev="sockfs" ino=8243 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.084670][ T29] audit: type=1400 audit(1754397480.573:3427): avc: denied { accept } for pid=4401 comm="syz.2.156" lport=41484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.094450][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 61.126903][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.202522][ T4409] loop0: detected capacity change from 0 to 512 [ 61.220388][ T4412] loop1: detected capacity change from 0 to 512 [ 61.236800][ T4409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.250019][ T4412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.256391][ T4416] loop5: detected capacity change from 0 to 512 [ 61.302128][ T4416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.464602][ T4410] loop3: detected capacity change from 0 to 512 [ 61.529669][ T4410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.555461][ T4410] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.606101][ T4400] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 61.621469][ T4400] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 61.633964][ T4400] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.633964][ T4400] [ 61.643967][ T4400] EXT4-fs (loop3): Total free blocks count 0 [ 61.650737][ T4400] EXT4-fs (loop3): Free/Dirty block details [ 61.656717][ T4400] EXT4-fs (loop3): free_blocks=65280 [ 61.662076][ T4400] EXT4-fs (loop3): dirty_blocks=33 [ 61.667423][ T4400] EXT4-fs (loop3): Block reservation details [ 61.674203][ T4400] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 61.975704][ T4438] loop2: detected capacity change from 0 to 512 [ 62.048522][ T4438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.061567][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.078737][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.127910][ T4442] loop0: detected capacity change from 0 to 512 [ 62.159215][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.164'. [ 62.183800][ T4443] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.207385][ T4442] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.254246][ T4443] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.264163][ T4442] Cannot find add_set index 0 as target [ 62.347388][ T4455] vlan0: entered allmulticast mode [ 62.356619][ T4455] dummy0: entered allmulticast mode [ 62.358100][ T4442] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 62.381866][ T4442] EXT4-fs (loop0): Remounting filesystem read-only [ 62.392492][ T4443] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.458462][ T37] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 62.467070][ T4455] siw: device registration error -23 [ 62.476178][ T37] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 62.489832][ T4443] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.627821][ T4443] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.639847][ T4443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.652570][ T4443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.707413][ T4443] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.788825][ T4463] 9pnet_fd: Insufficient options for proto=fd [ 62.820134][ T4463] lo speed is unknown, defaulting to 1000 [ 62.827155][ T4463] dummy0 speed is unknown, defaulting to 1000 [ 63.663269][ T4486] lo speed is unknown, defaulting to 1000 [ 63.670491][ T4486] dummy0 speed is unknown, defaulting to 1000 [ 63.956571][ T4487] loop1: detected capacity change from 0 to 512 [ 64.095602][ T4487] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.143056][ T29] audit: type=1326 audit(1754397483.223:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 64.167138][ T29] audit: type=1326 audit(1754397483.223:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 64.191503][ T29] audit: type=1326 audit(1754397483.223:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 64.215010][ T29] audit: type=1326 audit(1754397483.234:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 64.253874][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 64.310389][ T4466] Falling back ldisc for ttyS3. [ 64.466790][ T4495] loop2: detected capacity change from 0 to 512 [ 64.504860][ T4501] loop1: detected capacity change from 0 to 1024 [ 64.524748][ T4495] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.571925][ T4495] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.580867][ T4501] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.619337][ T4495] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.659648][ T4495] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 64.690661][ T4495] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.170: bg 0: block 40: padding at end of block bitmap is not set [ 64.706647][ T4495] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.730041][ T4495] EXT4-fs (loop2): 1 truncate cleaned up [ 64.806225][ T4527] loop0: detected capacity change from 0 to 512 [ 64.868485][ T4529] netlink: zone id is out of range [ 64.879206][ T4529] netlink: zone id is out of range [ 64.890625][ T4532] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.170: corrupted xattr block 31: invalid header [ 64.896787][ T4529] netlink: zone id is out of range [ 64.930232][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.178'. [ 64.942074][ T4536] loop3: detected capacity change from 0 to 512 [ 64.972522][ T4529] netlink: zone id is out of range [ 64.995492][ T4529] netlink: zone id is out of range [ 65.057656][ T4532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 65.077097][ T4532] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.170: corrupted xattr block 31: invalid header [ 65.091649][ T4529] netlink: zone id is out of range [ 65.097339][ T4529] netlink: zone id is out of range [ 65.103175][ T4529] netlink: zone id is out of range [ 65.133574][ T4532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 65.158635][ T4532] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.170: bad symlink. [ 65.175184][ T4529] netlink: zone id is out of range [ 65.195937][ T4529] netlink: zone id is out of range [ 65.504445][ T4570] loop5: detected capacity change from 0 to 512 [ 65.592677][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 65.671585][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 65.671836][ T29] audit: type=1326 audit(1754397485.552:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 65.694329][ T4573] loop1: detected capacity change from 0 to 1024 [ 65.726093][ T4567] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.736049][ T29] audit: type=1326 audit(1754397485.552:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 65.760205][ T29] audit: type=1326 audit(1754397485.562:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 65.784379][ T29] audit: type=1326 audit(1754397485.562:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 65.807982][ T29] audit: type=1326 audit(1754397485.562:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 65.832423][ T29] audit: type=1326 audit(1754397485.562:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec2c18e9a9 code=0x7ffc0000 [ 65.856020][ T29] audit: type=1326 audit(1754397485.562:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec2c18e9e3 code=0x7ffc0000 [ 65.880101][ T29] audit: type=1326 audit(1754397485.562:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec2c18d45f code=0x7ffc0000 [ 65.903676][ T29] audit: type=1326 audit(1754397485.562:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fec2c18ea37 code=0x7ffc0000 [ 65.915436][ T4573] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 65.927907][ T29] audit: type=1326 audit(1754397485.562:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec2c18d310 code=0x7ffc0000 [ 65.936884][ T4573] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 65.971046][ T4573] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 66.005754][ T4573] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.179: unexpected bad inode w/o EXT4_IGET_BAD [ 66.021624][ T4567] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.047010][ T4573] EXT4-fs (loop1): no journal found [ 66.052286][ T4573] EXT4-fs (loop1): can't get journal size [ 66.065426][ T4597] sd 0:0:1:0: device reset [ 66.124882][ T4602] loop0: detected capacity change from 0 to 128 [ 66.138682][ T4567] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.176728][ T4567] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.328742][ T4602] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.335773][ T4567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.350848][ T4567] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.426527][ T4613] lo speed is unknown, defaulting to 1000 [ 66.433484][ T4613] dummy0 speed is unknown, defaulting to 1000 [ 66.641146][ T4613] loop3: detected capacity change from 0 to 512 [ 66.649105][ T4567] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.704278][ T4613] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.878016][ T4567] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.127648][ T3308] EXT4-fs unmount: 22 callbacks suppressed [ 67.127664][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.150407][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.197'. [ 67.416969][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 67.427575][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 67.440560][ T4639] rdma_rxe: rxe_newlink: failed to add syz_tun [ 67.554472][ T4643] loop3: detected capacity change from 0 to 512 [ 67.584462][ T4643] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 67.592918][ T4645] loop0: detected capacity change from 0 to 1024 [ 67.593181][ T4643] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.607238][ T4643] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.622642][ T4643] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 67.630227][ T4643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.190: bg 0: block 40: padding at end of block bitmap is not set [ 67.644826][ T4643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 67.645219][ T4645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.654119][ T4643] EXT4-fs (loop3): 1 truncate cleaned up [ 67.668547][ T4645] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.671998][ T4643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.760140][ T4652] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.190: corrupted xattr block 31: invalid header [ 67.783683][ T4652] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 67.812893][ T4652] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.190: corrupted xattr block 31: invalid header [ 67.829568][ T4652] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 67.862218][ T4652] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.190: bad symlink. [ 67.919372][ T4656] sd 0:0:1:0: device reset [ 68.028941][ T4660] loop5: detected capacity change from 0 to 512 [ 68.041840][ T4660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.058898][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.071298][ T4663] loop1: detected capacity change from 0 to 512 [ 68.097019][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.176456][ T4667] loop0: detected capacity change from 0 to 256 [ 68.221200][ T4667] vfat: Unknown parameter 'shorname' [ 68.840913][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.889613][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.914157][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.930811][ T4678] loop3: detected capacity change from 0 to 512 [ 68.958102][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.003579][ T4683] loop1: detected capacity change from 0 to 512 [ 69.103520][ T4683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.376540][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 69.855253][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.011691][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 70.048191][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.083509][ T4702] sd 0:0:1:0: device reset [ 70.147782][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 70.191279][ T4706] loop5: detected capacity change from 0 to 512 [ 70.200898][ T4708] loop1: detected capacity change from 0 to 512 [ 70.218522][ T4708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.231802][ T4706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.754774][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 70.754792][ T29] audit: type=1326 audit(1754397491.013:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.3.209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fc941e9a9 code=0x0 [ 70.809451][ T4724] loop3: detected capacity change from 0 to 512 [ 70.816116][ T29] audit: type=1400 audit(1754397491.066:3971): avc: denied { bind } for pid=4718 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.864287][ T4724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.916175][ T29] audit: type=1400 audit(1754397491.109:3972): avc: denied { mounton } for pid=4718 comm="syz.3.209" path="/42/file0" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.976369][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.185462][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.271004][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.283460][ T4729] loop1: detected capacity change from 0 to 512 [ 71.302276][ T4729] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.310687][ T4729] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.323828][ T4729] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 71.339781][ T4731] loop5: detected capacity change from 0 to 512 [ 71.366052][ T4731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.412030][ T4729] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.491991][ T4729] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 71.512754][ T4729] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.210: bg 0: block 40: padding at end of block bitmap is not set [ 71.529549][ T4729] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 71.550196][ T4729] EXT4-fs (loop1): 1 truncate cleaned up [ 71.556920][ T4729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.658243][ T29] audit: type=1326 audit(1754397491.967:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 71.681729][ T29] audit: type=1326 audit(1754397491.967:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 71.705189][ T29] audit: type=1326 audit(1754397491.967:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 71.728615][ T29] audit: type=1326 audit(1754397491.967:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 71.751977][ T29] audit: type=1326 audit(1754397491.967:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 71.775351][ T29] audit: type=1326 audit(1754397491.967:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc941e9a9 code=0x7ffc0000 [ 71.832765][ T4743] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.210: corrupted xattr block 31: invalid header [ 71.944137][ T4743] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 71.988033][ T4743] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.210: corrupted xattr block 31: invalid header [ 72.248617][ T4743] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 72.307784][ T4743] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.210: bad symlink. [ 72.418710][ T4752] loop2: detected capacity change from 0 to 128 [ 72.466199][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.501832][ T4752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.549568][ T4752] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.575171][ T4760] sd 0:0:1:0: device reset [ 72.624093][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.684790][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.740058][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 72.799892][ T4766] loop5: detected capacity change from 0 to 512 [ 72.889005][ T4766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.946456][ T4773] loop0: detected capacity change from 0 to 512 [ 72.955902][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 72.972273][ T4773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.978560][ T4776] sd 0:0:1:0: device reset [ 73.042162][ T4775] loop3: detected capacity change from 0 to 1024 [ 73.047100][ T4780] lo speed is unknown, defaulting to 1000 [ 73.055629][ T4780] dummy0 speed is unknown, defaulting to 1000 [ 73.087673][ T4783] loop2: detected capacity change from 0 to 512 [ 73.104977][ T4775] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 73.115601][ T4775] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 73.126308][ T4775] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.155366][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.177760][ T4775] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.224: unexpected bad inode w/o EXT4_IGET_BAD [ 73.213164][ T4775] EXT4-fs (loop3): no journal found [ 73.215945][ T4783] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.218557][ T4775] EXT4-fs (loop3): can't get journal size [ 73.242589][ T4775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.262135][ T4783] bridge0: port 3(syz_tun) entered blocking state [ 73.268840][ T4783] bridge0: port 3(syz_tun) entered disabled state [ 73.278723][ T4783] syz_tun: entered allmulticast mode [ 73.284752][ T4783] syz_tun: entered promiscuous mode [ 73.290703][ T4783] bridge0: port 3(syz_tun) entered blocking state [ 73.297218][ T4783] bridge0: port 3(syz_tun) entered forwarding state [ 73.331448][ T4775] syzkaller0: tun_chr_ioctl cmd 35111 [ 73.353902][ T4783] syz_tun: left allmulticast mode [ 73.359018][ T4783] syz_tun: left promiscuous mode [ 73.364947][ T4783] bridge0: port 3(syz_tun) entered disabled state [ 73.411247][ T4783] bridge_slave_0: left allmulticast mode [ 73.417018][ T4783] bridge_slave_0: left promiscuous mode [ 73.422777][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.437072][ T4783] bridge_slave_1: left allmulticast mode [ 73.442820][ T4783] bridge_slave_1: left promiscuous mode [ 73.448687][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.571459][ T4783] bond0: (slave bond_slave_0): Releasing backup interface [ 73.585206][ T4783] bond0: (slave bond_slave_1): Releasing backup interface [ 73.593233][ T4794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.617842][ T4791] ================================================================== [ 73.626013][ T4791] BUG: KCSAN: data-race in __xa_clear_mark / file_write_and_wait_range [ 73.634339][ T4791] [ 73.636699][ T4791] write to 0xffff88810cf54f94 of 4 bytes by interrupt on cpu 1: [ 73.644365][ T4791] __xa_clear_mark+0x1c6/0x1e0 [ 73.649181][ T4791] __folio_end_writeback+0x177/0x470 [ 73.654511][ T4791] folio_end_writeback+0x71/0x3d0 [ 73.659594][ T4791] ext4_finish_bio+0x459/0x8c0 [ 73.664402][ T4791] ext4_end_bio+0x22a/0x330 [ 73.668955][ T4791] bio_endio+0x377/0x410 [ 73.673229][ T4791] blk_update_request+0x336/0x730 [ 73.678299][ T4791] blk_mq_end_request+0x26/0x50 [ 73.683206][ T4791] lo_complete_rq+0x98/0x140 [ 73.687844][ T4791] blk_done_softirq+0x77/0xb0 [ 73.692562][ T4791] handle_softirqs+0xb7/0x290 [ 73.697284][ T4791] run_ksoftirqd+0x1c/0x30 [ 73.701735][ T4791] smpboot_thread_fn+0x328/0x530 [ 73.706768][ T4791] kthread+0x489/0x510 [ 73.710876][ T4791] ret_from_fork+0xdd/0x150 [ 73.715425][ T4791] ret_from_fork_asm+0x1a/0x30 [ 73.720234][ T4791] [ 73.722584][ T4791] read to 0xffff88810cf54f94 of 4 bytes by task 4791 on cpu 0: [ 73.730164][ T4791] file_write_and_wait_range+0x10e/0x2c0 [ 73.735879][ T4791] generic_buffers_fsync_noflush+0x45/0x120 [ 73.741822][ T4791] ext4_sync_file+0x1ab/0x690 [ 73.746545][ T4791] vfs_fsync_range+0x10a/0x130 [ 73.751330][ T4791] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.756921][ T4791] ext4_file_write_iter+0x383/0xf00 [ 73.762176][ T4791] iter_file_splice_write+0x5ef/0x970 [ 73.767701][ T4791] direct_splice_actor+0x156/0x2a0 [ 73.772883][ T4791] splice_direct_to_actor+0x312/0x680 [ 73.778310][ T4791] do_splice_direct+0xda/0x150 [ 73.783127][ T4791] do_sendfile+0x380/0x650 [ 73.787574][ T4791] __x64_sys_sendfile64+0x105/0x150 [ 73.792824][ T4791] x64_sys_call+0x2bb0/0x2ff0 [ 73.797542][ T4791] do_syscall_64+0xd2/0x200 [ 73.802096][ T4791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.808038][ T4791] [ 73.810383][ T4791] value changed: 0x06000021 -> 0x0a000021 [ 73.816132][ T4791] [ 73.818477][ T4791] Reported by Kernel Concurrency Sanitizer on: [ 73.824670][ T4791] CPU: 0 UID: 0 PID: 4791 Comm: syz.0.222 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 73.836693][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.846789][ T4791] ================================================================== [ 73.856304][ T4783] team0: Port device team_slave_0 removed [ 73.882951][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.884150][ T4783] team0: Port device team_slave_1 removed [ 73.900019][ T4783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.907539][ T4783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.918018][ T4783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.926227][ T4783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.986722][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.022655][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.