last executing test programs: 4.912305208s ago: executing program 2 (id=186): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc8, 0x2}, 0x100100, 0x0, 0x0, 0x3, 0x8, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 4.717004442s ago: executing program 2 (id=190): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)='G', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x9}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3.790300875s ago: executing program 4 (id=201): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x440b0) 3.636310109s ago: executing program 2 (id=202): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x2, 0x10}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7f8}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x403, 0xfffffffc, 0x0, 0x2, "0062baad630400"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000002d40)=""/4100, 0x1004) 3.353153547s ago: executing program 4 (id=206): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r1, 0x4}, {r3, 0x1c}], 0x2, 0x0, 0x0, 0x0) 2.959215277s ago: executing program 1 (id=211): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000480)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.889076568s ago: executing program 3 (id=213): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="bc5154f23facdd5dd02bc92c723a6d6f64656c3a", 0x14) 2.678539573s ago: executing program 2 (id=215): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) syz_genetlink_get_family_id$ipvs(0x0, r0) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 2.516986707s ago: executing program 0 (id=216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 2.516810037s ago: executing program 1 (id=217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@usrquota}, {@nodelalloc}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodioread_nolock}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) fallocate(r0, 0x20, 0x0, 0x8000) 2.516621037s ago: executing program 3 (id=218): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 2.42700103s ago: executing program 4 (id=219): setns(0xc9, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0xfffffe00) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000020000000040000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x500000, 0x5, 0x0, 0x800, 0xa, "ae3256ec2bf85f69a6500202540237aec0b636"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000108000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="fc00000000000000080004000600000008001b"], 0x30}}, 0x0) 2.333028822s ago: executing program 4 (id=220): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xab}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.266268313s ago: executing program 1 (id=221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000001600000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 1.99917512s ago: executing program 3 (id=222): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x3, r3, 0x3, 0x80000}) 1.99767408s ago: executing program 1 (id=232): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r1, 0x1) 1.494923183s ago: executing program 2 (id=223): recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002340)=""/68, 0x44}], 0x2}, 0x8}], 0x1, 0x60, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 1.402186655s ago: executing program 0 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.318433497s ago: executing program 0 (id=225): pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.247125889s ago: executing program 0 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x30000009}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.216525209s ago: executing program 4 (id=227): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000400)}, 0x10) 1.126562582s ago: executing program 0 (id=228): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r1, 0xffffffffffffffff, 0x0) 1.057549144s ago: executing program 1 (id=229): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)='G', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x9}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.057348964s ago: executing program 3 (id=230): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x40c, 0x0, 0x0, 0x6, 0xf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8e774137560162b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x2842, 0x7, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x0, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0xa, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xb}, 0x10020a, 0x1, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 762.071301ms ago: executing program 2 (id=231): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c2501000000000001"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 711.984012ms ago: executing program 3 (id=233): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x6, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d8, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0xe000200f}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 215.180205ms ago: executing program 4 (id=234): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write(r2, 0x0, 0x0) 214.586685ms ago: executing program 3 (id=244): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 9.99196ms ago: executing program 1 (id=235): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) syz_genetlink_get_family_id$ipvs(0x0, r0) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=246): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000001000000000000000000000010500000010"], 0x0, 0x53}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000039000100faff070004000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x4c984}, 0x4008094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): [ 21.202453][ T28] audit: type=1400 audit(1787017973.128:104): avc: denied { write } for pid=3205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.225798][ T28] audit: type=1400 audit(1787017973.128:105): avc: denied { write } for pid=3216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.275036][ T28] audit: type=1400 audit(1787017973.208:106): avc: denied { write } for pid=3219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.298447][ T28] audit: type=1400 audit(1787017973.218:107): avc: denied { write } for pid=3230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.419590][ T28] audit: type=1400 audit(1787017973.348:108): avc: denied { write } for pid=3233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.443057][ T28] audit: type=1400 audit(1787017973.368:109): avc: denied { write } for pid=3244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.888198][ T28] audit: type=1400 audit(1787017973.818:110): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.911370][ T28] audit: type=1400 audit(1787017973.818:111): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.991397][ T28] audit: type=1400 audit(1787017973.918:112): avc: denied { transition } for pid=3265 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.014771][ T28] audit: type=1400 audit(1787017973.918:113): avc: denied { noatsecure } for pid=3265 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 30.175399][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 30.175416][ T28] audit: type=1400 audit(1787017982.108:117): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.205190][ T28] audit: type=1400 audit(1787017982.138:118): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.205971][ T3283] cgroup: Unknown subsys name 'net' [ 30.233870][ T28] audit: type=1400 audit(1787017982.168:119): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.343606][ T3283] cgroup: Unknown subsys name 'cpuset' [ 30.349815][ T3283] cgroup: Unknown subsys name 'rlimit' [ 30.499741][ T28] audit: type=1400 audit(1787017982.428:120): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.525062][ T28] audit: type=1400 audit(1787017982.428:121): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.546926][ T28] audit: type=1400 audit(1787017982.428:122): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.560422][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.568066][ T28] audit: type=1400 audit(1787017982.428:123): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.597272][ T28] audit: type=1400 audit(1787017982.478:124): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.613785][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.619180][ T28] audit: type=1400 audit(1787017982.488:125): avc: denied { search } for pid=3018 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.649248][ T28] audit: type=1400 audit(1787017982.488:126): avc: denied { search } for pid=3018 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.005270][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.012477][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.020225][ T3299] bridge_slave_0: entered allmulticast mode [ 32.026899][ T3299] bridge_slave_0: entered promiscuous mode [ 32.036444][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043703][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.050782][ T3299] bridge_slave_1: entered allmulticast mode [ 32.057228][ T3299] bridge_slave_1: entered promiscuous mode [ 32.099882][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.122617][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.129914][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.137709][ T3298] bridge_slave_0: entered allmulticast mode [ 32.144096][ T3298] bridge_slave_0: entered promiscuous mode [ 32.151948][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.179634][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.187004][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.194415][ T3298] bridge_slave_1: entered allmulticast mode [ 32.200879][ T3298] bridge_slave_1: entered promiscuous mode [ 32.208545][ T3299] team0: Port device team_slave_0 added [ 32.232437][ T3299] team0: Port device team_slave_1 added [ 32.266888][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.274243][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.281549][ T3293] bridge_slave_0: entered allmulticast mode [ 32.288281][ T3293] bridge_slave_0: entered promiscuous mode [ 32.295879][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.308862][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.316616][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.343918][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.359398][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.366832][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.374182][ T3293] bridge_slave_1: entered allmulticast mode [ 32.380569][ T3293] bridge_slave_1: entered promiscuous mode [ 32.388210][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.400114][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.407209][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.433830][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.469794][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.477015][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.484395][ T3300] bridge_slave_0: entered allmulticast mode [ 32.490790][ T3300] bridge_slave_0: entered promiscuous mode [ 32.507447][ T3298] team0: Port device team_slave_0 added [ 32.518268][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.525518][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.532640][ T3300] bridge_slave_1: entered allmulticast mode [ 32.539114][ T3300] bridge_slave_1: entered promiscuous mode [ 32.546470][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.560807][ T3298] team0: Port device team_slave_1 added [ 32.571025][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.578363][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.585794][ T3294] bridge_slave_0: entered allmulticast mode [ 32.592666][ T3294] bridge_slave_0: entered promiscuous mode [ 32.605220][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.623970][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.631584][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.639128][ T3294] bridge_slave_1: entered allmulticast mode [ 32.647350][ T3294] bridge_slave_1: entered promiscuous mode [ 32.664134][ T3299] hsr_slave_0: entered promiscuous mode [ 32.670512][ T3299] hsr_slave_1: entered promiscuous mode [ 32.677218][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.684518][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.711975][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.729036][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.743071][ T3293] team0: Port device team_slave_0 added [ 32.749297][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.756372][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.782967][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.799020][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.813908][ T3293] team0: Port device team_slave_1 added [ 32.827722][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.848988][ T3300] team0: Port device team_slave_0 added [ 32.860038][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.879447][ T3300] team0: Port device team_slave_1 added [ 32.890394][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.897527][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.923691][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.957757][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.964922][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.991608][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.005366][ T3294] team0: Port device team_slave_0 added [ 33.013320][ T3298] hsr_slave_0: entered promiscuous mode [ 33.019498][ T3298] hsr_slave_1: entered promiscuous mode [ 33.025493][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.032916][ T3298] Cannot create hsr debugfs directory [ 33.038885][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.046250][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.073121][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.086812][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.093813][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.119851][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.134533][ T3294] team0: Port device team_slave_1 added [ 33.150119][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.157153][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.183774][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.197391][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.204797][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.230936][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.287379][ T3293] hsr_slave_0: entered promiscuous mode [ 33.293714][ T3293] hsr_slave_1: entered promiscuous mode [ 33.299672][ T3293] debugfs: 'hsr0' already exists in 'hsr' [ 33.305544][ T3293] Cannot create hsr debugfs directory [ 33.313132][ T3300] hsr_slave_0: entered promiscuous mode [ 33.319199][ T3300] hsr_slave_1: entered promiscuous mode [ 33.325096][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.330921][ T3300] Cannot create hsr debugfs directory [ 33.371942][ T3294] hsr_slave_0: entered promiscuous mode [ 33.378455][ T3294] hsr_slave_1: entered promiscuous mode [ 33.384467][ T3294] debugfs: 'hsr0' already exists in 'hsr' [ 33.390190][ T3294] Cannot create hsr debugfs directory [ 33.520002][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.528701][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.536460][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.545459][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.560924][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.569971][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.588027][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.597385][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.630651][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.639648][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.653939][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.662595][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.670300][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.678663][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.686304][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.694972][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.721741][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.730596][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.738858][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.747738][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.756044][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.764585][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.772983][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.781364][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.819421][ T3293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.827914][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.835910][ T3293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.844856][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.854027][ T3293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.862767][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.870577][ T3293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.879524][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.910441][ T3294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.919584][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.928435][ T3294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.936901][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.944900][ T3294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.953691][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.962060][ T3294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.971669][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.019413][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.035132][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.053536][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.070751][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.077993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.088771][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.099937][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.107502][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.116476][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.123812][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.138704][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.148953][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.156691][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.167026][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.198527][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.209847][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.221912][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.229138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.241747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.249031][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.260479][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.277316][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.284577][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.294212][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.301384][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.337049][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.359140][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.372227][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.379317][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.401455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.408852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.606623][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.628522][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.668445][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.731260][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.756798][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.810999][ T3300] veth0_vlan: entered promiscuous mode [ 34.832791][ T3300] veth1_vlan: entered promiscuous mode [ 34.854919][ T3299] veth0_vlan: entered promiscuous mode [ 34.864701][ T3298] veth0_vlan: entered promiscuous mode [ 34.878175][ T3299] veth1_vlan: entered promiscuous mode [ 34.891279][ T3298] veth1_vlan: entered promiscuous mode [ 34.912667][ T3300] veth0_macvtap: entered promiscuous mode [ 34.922910][ T3300] veth1_macvtap: entered promiscuous mode [ 34.940098][ T3293] veth0_vlan: entered promiscuous mode [ 34.947130][ T3299] veth0_macvtap: entered promiscuous mode [ 34.965973][ T3298] veth0_macvtap: entered promiscuous mode [ 34.973847][ T3299] veth1_macvtap: entered promiscuous mode [ 34.981591][ T3293] veth1_vlan: entered promiscuous mode [ 34.988872][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.998251][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.022602][ T3298] veth1_macvtap: entered promiscuous mode [ 35.031979][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.041120][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.072696][ T3293] veth0_macvtap: entered promiscuous mode [ 35.082357][ T3293] veth1_macvtap: entered promiscuous mode [ 35.097659][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.110762][ T3294] veth0_vlan: entered promiscuous mode [ 35.122358][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.134235][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.155104][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.172993][ T3468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.186856][ T3294] veth1_vlan: entered promiscuous mode [ 35.188853][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 35.188933][ T28] audit: type=1400 audit(1787017987.118:147): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.197661][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.223247][ T28] audit: type=1400 audit(1787017987.118:148): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.223287][ T28] audit: type=1400 audit(1787017987.128:149): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.232316][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.314237][ T3294] veth0_macvtap: entered promiscuous mode [ 35.323940][ T3419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.336565][ T28] audit: type=1400 audit(1787017987.268:150): avc: denied { open } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.357787][ T28] audit: type=1400 audit(1787017987.268:151): avc: denied { perfmon } for pid=3506 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.362918][ T3419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.381014][ T28] audit: type=1400 audit(1787017987.268:152): avc: denied { kernel } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.408405][ T3419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.412926][ T3508] loop3: detected capacity change from 0 to 164 [ 35.431908][ T3294] veth1_macvtap: entered promiscuous mode [ 35.453304][ T3457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.460198][ T3508] iso9660: Bad value for 'dmode' [ 35.468899][ T3457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.479825][ T28] audit: type=1400 audit(1787017987.418:153): avc: denied { create } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.503423][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.514473][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.524004][ T28] audit: type=1400 audit(1787017987.438:154): avc: denied { mmap_zero } for pid=3512 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.524039][ T28] audit: type=1400 audit(1787017987.448:155): avc: denied { write } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.545171][ T28] audit: type=1400 audit(1787017987.478:156): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.587469][ T3507] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 35.594633][ T3419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.600978][ T3507] ipt_ECN: cannot use operation on non-tcp rule [ 35.623677][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.653276][ T3419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.679371][ T3419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.724773][ T3419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.836184][ T3536] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10'. [ 35.855766][ T3536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 36.002600][ T3553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 36.243224][ T3554] smpboot: CPU 1 is now offline [ 36.263572][ T3457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.286115][ T3560] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 36.333021][ T3468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.351992][ T3468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.376699][ T3573] netlink: 'syz.2.15': attribute type 7 has an invalid length. [ 36.463045][ T3468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.470972][ T3536] syz.3.10 (3536) used greatest stack depth: 10944 bytes left [ 36.495438][ T3468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.533643][ T3468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.562927][ T3468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.583218][ T3468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.592943][ T3468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.903953][ T3619] netlink: 136 bytes leftover after parsing attributes in process `syz.0.21'. [ 36.974515][ T3624] tipc: Failed to remove unknown binding: 66,0,0/0:703273299/703273300 [ 37.007233][ T3626] syz_tun: entered allmulticast mode [ 37.033475][ T3626] syz_tun: left allmulticast mode [ 37.141083][ T3636] loop1: detected capacity change from 0 to 512 [ 37.179816][ T3636] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.29: inode has both inline data and extents flags [ 37.213147][ T3636] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.213320][ T3636] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.29: couldn't read orphan inode 15 (err -117) [ 37.234484][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 37.234507][ C0] EXT4-fs (loop1): initial error at time 1787017989: ext4_orphan_get:1399: inode 15 [ 37.234545][ C0] EXT4-fs (loop1): last error at time 1787017989: ext4_orphan_get:1399: inode 15 [ 37.277305][ T3643] netlink: 'syz.2.30': attribute type 5 has an invalid length. [ 37.286016][ T3636] loop1: lost filesystem error report for type 5 error -117 [ 37.290957][ T3636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.340693][ T3646] capability: warning: `syz.2.31' uses 32-bit capabilities (legacy support in use) [ 37.361440][ T3646] cgroup: Setting release_agent not allowed [ 37.533812][ T3658] xt_hashlimit: size too large, truncated to 1048576 [ 37.644517][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.196827][ T3704] batman_adv: batadv0: Adding interface: veth0 [ 38.218327][ T3704] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.280431][ T3704] batman_adv: batadv0: Interface activated: veth0 [ 38.306123][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.319377][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.343305][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.368341][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.385454][ T3704] batman_adv: batadv0: Interface deactivated: veth0 [ 38.407448][ T3704] batman_adv: batadv0: Removing interface: veth0 [ 38.591313][ T3736] loop0: detected capacity change from 0 to 4096 [ 38.627275][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.820537][ T3752] loop3: detected capacity change from 0 to 4096 [ 38.855978][ T3752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.044772][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.142925][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 39.633090][ T3775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.66'. [ 39.668175][ T3750] syz.0.55 (3750) used greatest stack depth: 10368 bytes left [ 39.679147][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.976130][ T3787] loop2: detected capacity change from 0 to 764 [ 40.233032][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 40.233055][ T28] audit: type=1400 audit(1787017992.158:259): avc: denied { setopt } for pid=3794 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.269892][ T28] audit: type=1400 audit(1787017992.198:260): avc: denied { name_connect } for pid=3794 comm="syz.1.75" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 40.313264][ T28] audit: type=1400 audit(1787017992.238:261): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.379007][ T28] audit: type=1400 audit(1787017992.238:262): avc: denied { getopt } for pid=3794 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.427253][ T28] audit: type=1400 audit(1787017992.288:263): avc: denied { listen } for pid=3799 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.472196][ T28] audit: type=1400 audit(1787017992.288:264): avc: denied { write } for pid=3799 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.508444][ T28] audit: type=1400 audit(1787017992.288:265): avc: denied { accept } for pid=3799 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.557931][ T28] audit: type=1400 audit(1787017992.398:266): avc: denied { map } for pid=3805 comm="syz.4.80" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.586090][ T28] audit: type=1400 audit(1787017992.398:267): avc: denied { read write } for pid=3805 comm="syz.4.80" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.632600][ T28] audit: type=1400 audit(1787017992.428:268): avc: denied { block_suspend } for pid=3805 comm="syz.4.80" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.973850][ T3817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.046207][ T3817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.852519][ T3835] raw_sendmsg: syz.1.91 forgot to set AF_INET. Fix it! [ 41.959405][ T3843] tipc: Started in network mode [ 41.969013][ T3843] tipc: Node identity ac141441, cluster identity 4711 [ 41.982783][ T3843] tipc: Enabled bearer , priority 10 [ 42.177949][ T3857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 42.375697][ T3872] loop3: detected capacity change from 0 to 128 [ 42.382408][ T3872] ======================================================= [ 42.382408][ T3872] WARNING: The mand mount option has been deprecated and [ 42.382408][ T3872] and is ignored by this kernel. Remove the mand [ 42.382408][ T3872] option from the mount to silence this warning. [ 42.382408][ T3872] ======================================================= [ 43.521491][ T3882] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 43.538379][ T3902] loop4: detected capacity change from 0 to 1024 [ 43.545960][ T3374] tipc: Node number set to 2886997057 [ 43.552784][ T3902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.560839][ T3902] EXT4-fs: Ignoring removed orlov option [ 43.578257][ T3902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.608217][ T3882] syz.0.111 (3882) used greatest stack depth: 10048 bytes left [ 43.698157][ T3907] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.708056][ T3907] SELinux: failed to load policy [ 43.756394][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.937249][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.990140][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.036130][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.089085][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.204599][ T30] bridge_slave_1: left allmulticast mode [ 44.212352][ T30] bridge_slave_1: left promiscuous mode [ 44.225517][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.234389][ T30] bridge_slave_0: left allmulticast mode [ 44.240604][ T30] bridge_slave_0: left promiscuous mode [ 44.247045][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.282912][ T49] rpcbind: server 127.0.0.1 not responding, timed out [ 44.311430][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.325838][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.337621][ T30] bond0 (unregistering): Released all slaves [ 44.417582][ T30] hsr_slave_0: left promiscuous mode [ 44.426925][ T30] hsr_slave_1: left promiscuous mode [ 44.432590][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.443356][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.476199][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.488994][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.549880][ T30] veth1_macvtap: left promiscuous mode [ 44.563054][ T30] veth0_macvtap: left promiscuous mode [ 44.572673][ T30] veth1_vlan: left promiscuous mode [ 44.590247][ T30] veth0_vlan: left promiscuous mode [ 44.781329][ T3978] loop4: detected capacity change from 0 to 1024 [ 44.789130][ T3978] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.789249][ T30] team0 (unregistering): Port device team_slave_1 removed [ 44.820436][ T3978] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.831248][ T3978] jbd2_journal_init_inode: Cannot locate journal superblock [ 44.831311][ T30] team0 (unregistering): Port device team_slave_0 removed [ 44.838770][ T3978] EXT4-fs (loop4): Could not load journal inode [ 44.902536][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 44.914892][ T3979] Zero length message leads to an empty skb [ 45.068179][ T4005] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.142'. [ 45.081638][ T4005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 45.116397][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.123810][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.131352][ T3925] bridge_slave_0: entered allmulticast mode [ 45.138391][ T3925] bridge_slave_0: entered promiscuous mode [ 45.153691][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.162675][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.170659][ T3925] bridge_slave_1: entered allmulticast mode [ 45.177377][ T3925] bridge_slave_1: entered promiscuous mode [ 45.216490][ T3925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.228778][ T3925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.249420][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 45.276159][ T3925] team0: Port device team_slave_0 added [ 45.304683][ T3925] team0: Port device team_slave_1 added [ 45.339648][ T3925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.347871][ T3925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.377413][ T3925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.401239][ T3925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.410489][ T3925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.460379][ T3925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.497867][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 45.497886][ T28] audit: type=1400 audit(1787017997.428:318): avc: denied { write } for pid=4032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.500972][ T3925] hsr_slave_0: entered promiscuous mode [ 45.534606][ T3925] hsr_slave_1: entered promiscuous mode [ 45.541687][ T3925] debugfs: 'hsr0' already exists in 'hsr' [ 45.548097][ T3925] Cannot create hsr debugfs directory [ 45.558794][ T28] audit: type=1400 audit(1787017997.488:319): avc: denied { write } for pid=4047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.616067][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 45.730965][ T4057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 45.768182][ T4063] syz.1.148 uses obsolete (PF_INET,SOCK_PACKET) [ 45.800193][ T28] audit: type=1400 audit(1787017997.728:320): avc: denied { write } for pid=4055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.839960][ T28] audit: type=1400 audit(1787017997.728:321): avc: denied { write } for pid=4070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.942470][ T4083] uprobe: syz.0.152:4083 failed to unregister, leaking uprobe [ 46.036774][ T28] audit: type=1400 audit(1787017997.968:322): avc: denied { write } for pid=4074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.041792][ T3925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.114871][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.132469][ T28] audit: type=1400 audit(1787017998.058:323): avc: denied { write } for pid=4106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.143663][ T3925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.325830][ T28] audit: type=1400 audit(1787017998.258:324): avc: denied { write } for pid=4111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.351632][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.374490][ T3925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.397376][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.408805][ T28] audit: type=1400 audit(1787017998.338:325): avc: denied { write } for pid=4126 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.453827][ T3925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.474915][ T3925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.551678][ T3925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.577900][ T3925] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.586979][ T28] audit: type=1400 audit(1787017998.518:326): avc: denied { write } for pid=4130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.596980][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.618331][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.634691][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.641959][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.646619][ T28] audit: type=1400 audit(1787017998.578:327): avc: denied { write } for pid=4147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.683488][ T4150] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 46.741417][ T4150] bond1: entered promiscuous mode [ 46.754127][ T4150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.800941][ T4156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.812386][ T4156] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 46.862889][ T4156] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 46.901545][ T4156] bond1: (slave xfrm1): making interface the new active one [ 46.935496][ T4156] xfrm1: entered promiscuous mode [ 46.951111][ T4156] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 47.146297][ T3925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.256643][ T4210] loop3: detected capacity change from 0 to 128 [ 47.438085][ T3925] veth0_vlan: entered promiscuous mode [ 47.479152][ T3925] veth1_vlan: entered promiscuous mode [ 47.503360][ T3925] veth0_macvtap: entered promiscuous mode [ 47.520431][ T3925] veth1_macvtap: entered promiscuous mode [ 47.565689][ T3925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.597228][ T3925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.683439][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.698221][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.716647][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.763070][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.211057][ T4252] syz.2.182 (4252) used greatest stack depth: 9624 bytes left [ 48.282131][ T4264] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 48.564615][ T4280] loop3: detected capacity change from 0 to 4096 [ 48.583427][ T4281] loop2: detected capacity change from 0 to 4096 [ 48.594321][ T4280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.633124][ T4281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.900051][ T4296] loop0: detected capacity change from 0 to 128 [ 49.359179][ T4310] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 49.445697][ T4314] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 49.492228][ T4314] bond1: entered promiscuous mode [ 49.510587][ T4314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.561795][ T4314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.583917][ T3925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.587859][ T4314] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 49.595396][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.604150][ T4314] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 49.648358][ T4314] bond1: (slave xfrm1): making interface the new active one [ 49.657484][ T4327] loop0: detected capacity change from 0 to 4096 [ 49.685689][ T4327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.703892][ T4314] xfrm1: entered promiscuous mode [ 49.724502][ T4314] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 49.932652][ T4343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.207'. [ 50.349387][ T4357] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 50.568657][ T4359] loop2: detected capacity change from 0 to 4096 [ 50.596583][ T3419] rpcbind: server 127.0.0.1 not responding, timed out [ 50.621852][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.640607][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 50.640638][ T28] audit: type=1400 audit(1787018002.568:344): avc: denied { write } for pid=4358 comm="syz.2.215" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.710364][ T4362] loop1: detected capacity change from 0 to 1024 [ 50.731630][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.744362][ T4362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.764186][ T4362] EXT4-fs: Ignoring removed orlov option [ 50.814251][ T4362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.887852][ T28] audit: type=1400 audit(1787018002.818:345): avc: denied { write } for pid=4361 comm="syz.1.217" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.948309][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.746870][ T3925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.923564][ T4373] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 52.240444][ T4413] loop1: detected capacity change from 0 to 4096 [ 52.281002][ T4413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.345825][ T28] audit: type=1400 audit(1787018004.278:346): avc: denied { write } for pid=4410 comm="syz.1.229" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.666657][ T28] audit: type=1326 audit(1787018004.598:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.0.228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f025da1e0d9 code=0x0 [ 52.969531][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.109970][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.204252][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.253755][ T4434] loop1: detected capacity change from 0 to 4096 [ 53.278352][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.301927][ T28] audit: type=1400 audit(1787018005.228:348): avc: denied { write } for pid=4433 comm="syz.1.235" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.644585][ T4437] ================================================================== [ 53.653091][ T4437] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 53.660697][ T4437] [ 53.663048][ T4437] write to 0xffff8881076b929c of 4 bytes by interrupt on cpu 0: [ 53.670982][ T4437] __xa_clear_mark+0x1c6/0x1e0 [ 53.675784][ T4437] __folio_end_writeback+0xf4/0x360 [ 53.681482][ T4437] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 53.687935][ T4437] folio_end_writeback+0x1c/0x70 [ 53.693074][ T4437] ext4_finish_bio+0x454/0x770 [ 53.697963][ T4437] ext4_end_bio+0x281/0x3a0 [ 53.702489][ T4437] bio_endio+0x35b/0x3f0 [ 53.706770][ T4437] blk_update_request+0x338/0x710 [ 53.711828][ T4437] blk_mq_end_request+0x26/0x50 [ 53.716798][ T4437] lo_complete_rq+0x98/0x130 [ 53.721587][ T4437] blk_done_softirq+0x77/0xb0 [ 53.726290][ T4437] handle_softirqs+0xb9/0x280 [ 53.731035][ T4437] run_ksoftirqd+0x1c/0x30 [ 53.735641][ T4437] smpboot_thread_fn+0x32a/0x510 [ 53.740605][ T4437] kthread+0x221/0x270 [ 53.744684][ T4437] ret_from_fork+0x146/0x330 [ 53.749302][ T4437] ret_from_fork_asm+0x1a/0x30 [ 53.754088][ T4437] [ 53.756592][ T4437] read to 0xffff8881076b929c of 4 bytes by task 4437 on cpu 1: [ 53.764758][ T4437] xas_find_marked+0x602/0x650 [ 53.769540][ T4437] filemap_get_folios_tag+0xf7/0x400 [ 53.775010][ T4437] file_write_and_wait_range+0x20c/0x2f0 [ 53.780674][ T4437] ext4_sync_file+0x114/0x5c0 [ 53.785458][ T4437] vfs_fsync_range+0xc5/0xe0 [ 53.790073][ T4437] ext4_buffered_write_iter+0x426/0x480 [ 53.795897][ T4437] ext4_file_write_iter+0x38e/0xef0 [ 53.801128][ T4437] iter_file_splice_write+0x6a0/0xa60 [ 53.806788][ T4437] direct_splice_actor+0x156/0x280 [ 53.812095][ T4437] splice_direct_to_actor+0x2f9/0x680 [ 53.817663][ T4437] do_splice_direct+0x119/0x1a0 [ 53.822625][ T4437] do_sendfile+0x37d/0x640 [ 53.827072][ T4437] __x64_sys_sendfile64+0x105/0x150 [ 53.832374][ T4437] x64_sys_call+0x2e27/0x3050 [ 53.837237][ T4437] do_syscall_64+0x136/0x3c0 [ 53.841939][ T4437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.848107][ T4437] [ 53.850608][ T4437] value changed: 0x0e000021 -> 0x04000021 [ 53.856596][ T4437] [ 53.858922][ T4437] Reported by Kernel Concurrency Sanitizer on: [ 53.865343][ T4437] CPU: 1 UID: 0 PID: 4437 Comm: syz.1.235 Tainted: G S syzkaller #0 PREEMPT(lazy) [ 53.876206][ T4437] Tainted: [S]=CPU_OUT_OF_SPEC [ 53.881054][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.891203][ T4437] ================================================================== [ 54.162637][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.