last executing test programs: 4.285418582s ago: executing program 1 (id=1525): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.248592925s ago: executing program 0 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) getresuid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4e2, &(0x7f0000000b80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() 4.224543607s ago: executing program 1 (id=1530): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open(0x0, 0x1612c2, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x8004) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdir(0x0, 0x0) r4 = open(0x0, 0x0, 0x0) mkdirat(r4, 0x0, 0x0) unlinkat(r4, 0x0, 0x200) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.108463975s ago: executing program 1 (id=1532): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.282659707s ago: executing program 0 (id=1534): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000340)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000380)=0x2c) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000004) getsockopt$inet_int(r3, 0x10d, 0xce, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x200400, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) 3.158124706s ago: executing program 1 (id=1537): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000302"], 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 3.095874651s ago: executing program 3 (id=1538): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, 0x0) read(r1, &(0x7f0000000080)=""/50, 0x32) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.956127811s ago: executing program 1 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRES16, @ANYRESDEC, @ANYRES32], 0xd, 0x2a4, &(0x7f0000001b00)="$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") mount$nfs(&(0x7f0000000100)='.,.', 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffff8}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000440)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@noinit_itable}, {@noquota}, {@block_validity}, {@delalloc}, {@user_xattr}, {@norecovery}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000003080101000000000064d1929d56a4026b106a7b000000000000001c00048008000640000100000800074000000008080007400000edb30500030084000000"], 0x38}}, 0x4000000) 2.82682507s ago: executing program 3 (id=1540): openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000b06000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x50}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="29ec608dd857"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c000280080005400000f7e70800044000000011080002400000000a080003400000000d08000140000000000900010073797a30"], 0xd8}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.814833771s ago: executing program 0 (id=1541): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = inotify_init1(0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) fcntl$setown(r2, 0x8, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) setreuid(0x0, 0xee00) msgctl$MSG_STAT(r3, 0xb, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x2}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x7d02b2701e884fae, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03dc027b0f84f12f000000000000000000f5d166b5ce7964276420be6e06ce85f3d12675aec7e759127844a50474a93d95eb53b3035829e0ef33228be1bee54f64eef61548b76accea8dae096827d67c18291a08e321b5d1cee567d859afe05c098a432802e0d9752fd08f479c3b61b65ab9c5b5e92331483e7d174538ebf13f68a0b085f1b10f0a6b9a85cfa2ff9e7a7a9fce2d6de766f094f45958954b811354a4c0bc04cbd5f1b60b2e8c25dc2ef1aff32cc8a099a4d835816f737167c48d12459285960436"], 0x11, 0x800) msgrcv(0x0, &(0x7f0000000480), 0x3c, 0x1, 0x3800) 2.740161347s ago: executing program 0 (id=1542): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x181681, 0x0) fallocate(r1, 0x41, 0x0, 0x1000f4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x4, 0x294, 0x1}, 0x48) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x90}}, 0x0) 2.604211597s ago: executing program 0 (id=1553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x23d, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.603888487s ago: executing program 1 (id=1544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x70, 0xff, 0x810, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x7}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1459c2, 0x0) ftruncate(r2, 0x2007ffd) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.440214069s ago: executing program 2 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) listen(r6, 0x80) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000bc0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x34}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000040), 0x6, 0x4f3, &(0x7f0000000140)="$eJzs3U1vVF8ZAPDnTmegheoUdIEkAvKSYpRpS3lpXCAkvqxIjLgvtZ02Tacd0k6BNkSGT6AxRE1cuXJj4gcwMXwEY0KiOxeuNESLLNyYMfMG7XSm//bP0IH290su99xzmPs8Z17u3HPPTSeAQ+tcRNyOiL6IuBQR2UZ9qrFEub5U/9/rjSfT1SWJSuXev5JIGnWt+zzeeFjVD78f8eNke9yVtfWFqUIhv7yprvI01q/ML07N5efyS+PjYzcmbk5cnxjdZU+S9E6tgxFx6ztvfvHT337v1h+/+ejvk/+8/JNqWvcb7e360Q31rmeiv1lR/hBReqf6vknXeggAwKfgYkScjIjzEfH1yEZf7HgaDQAAAHyCKt8ePNosAgAAAAdTqnZvbFK7PbVeTqVyufo9vF+OY6lCcaX0jdni6tJM/R7aocikZucL+dHGvcJDkUmq22O18rvtqy3b4xFxIiKeZweq27U2AAAAYH8cr4//U7nG+P9Ntj7+BwAAAA4Yk/EAAABw8Bn/AwAAwMFn/A8AAAAH2g/u3q0uldcbT2q/AzDzcG11ofjwykx+ZSG3uDqdmy4uP8jNFYtzhXyu77P3VygWH1yLpdXHI6X0SmlkZW19crG4ulSarP2u92T+5D70CQAAANjqxNkXf00iovytgdoyFBFHGm2ZHucGfDSSdEvF/a/1KBOgK3ZxSX+rc6sfJhFg37V+pwOHhzE+kLRWtJwY9Hc6VfjT3mM55wAAgN4Y/srW+f8w/w+HRqrXCQA987NeJwD0jGvxcHhl9n4HIHDAbJv/b9HfqWHX8/+Vyp4SAgAAum6wvipHYy5wMFKpXO7ttGAyO1/Ij0bEFyPiL9nM0er2WA/zBQAAAAAAAAAAAAAAAAAAAAAAAIBPUaWSRAUAAAA40CJS/0gav/81nL042Hp94Ejy32xtHRGPfn3vl4+nSqXlsWr9v9/Wl37VqL/aiysYAAAAcBhldmxtjtOb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KbXG0+mm8t+xn11JwZiqF38dPTX1v2RiYhj/0kivelxSUT0dSF++VlEnGoXP6mmFUONLFrjpyJioMfxj3chPhxmL+5ExO12n79UnKut23/+0o3lfb26U/uQt43fPP71dTj+fWGXMU6//P1Ix/jPIk6n2x9/mvGTDvEv7DL+/R+tr3dqq/wmYrjt90+yJdZIafHByMra+pX5xam5/Fx+aXx87MbEzYnrE6Mjs/OFfOPftjF+/tU/lJ937H+qtt4cv9nPoXqGTzv1/+Iu+/+/l483vlQvZrbHj7h8of3rf6q2bv/8V98TlxrfA9X24Wa5XC9vduZ3fz7TKbdq/JkOz3/99c9WOvX/8u66v63PAEBvraytL0wVCvnlfSicv9a9HSb7lLNCh0L/x5HGfhe++977aZ4Ov89+/ta1flXHDO2benxgAgAAuu7dSX+vMwEAAAAAAAAAAAAAAAAAAIDD63P98bCze3tUa8xyb7oKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCj/wcAAP//JOjJ2Q==") socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @initdev}, &(0x7f0000000680)=0xc) 2.416104301s ago: executing program 2 (id=1547): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='ext4_writepages_result\x00', r1}, 0x10) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0xe, &(0x7f0000000400)={[{@nodelalloc}, {@resuid={'resuid', 0x3d, r3}}, {@debug_want_extra_isize}, {@lazytime}, {@i_version}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0x3, 0x450, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737370000000000000002686f72746e616d653d6c6f7765722c636865636b3d7300006963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7783722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000000000065743d30121df4dc303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaa97b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d271628028b9786e1fbfb3d63fc2561421488c9de8d3739a94bf138d582f6b67de0cad933631794271b2259fe5d73a4cad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374cdbbd29aae47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4825a83c284dfe9ae1c6e0100293c970f2dae776decf07b085e16511b00d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a30000", @ANYRESOCT, @ANYRES32], 0x0, 0x2b1, &(0x7f0000000840)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) readv(r6, &(0x7f0000002840)=[{&(0x7f0000002800)=""/46, 0x2e}], 0x1) recvmmsg(r0, &(0x7f0000001b80), 0x1, 0x40010122, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f00000000c0)="01000000000000003135f65c8873ec7ee5cd1e05ecb477", 0x17, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 2.379982064s ago: executing program 0 (id=1548): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) 2.311452009s ago: executing program 2 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006970766c616e300000000000000000001400350062726964676530"], 0x80}}, 0x0) 2.010217401s ago: executing program 3 (id=1554): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) 1.471199551s ago: executing program 2 (id=1560): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4050, 0xfd2}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000300)=""/143, 0x8f}], 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32], 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 1.329881111s ago: executing program 4 (id=1563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.21502197s ago: executing program 4 (id=1564): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = inotify_init1(0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) fcntl$setown(r2, 0x8, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) setreuid(0x0, 0xee00) msgctl$MSG_STAT(r3, 0xb, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x2}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x7d02b2701e884fae, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03dc027b0f84f12f000000000000000000f5d166b5ce7964276420be6e06ce85f3d12675aec7e759127844a50474a93d95eb53b3035829e0ef33228be1bee54f64eef61548b76accea8dae096827d67c18291a08e321b5d1cee567d859afe05c098a432802e0d9752fd08f479c3b61b65ab9c5b5e92331483e7d174538ebf13f68a0b085f1b10f0a6b9a85cfa2ff9e7a7a9fce2d6de766f094f45958954b811354a4c0bc04cbd5f1b60b2e8c25dc2ef1aff32cc8a099a4d835816f737167c48d12459285960436"], 0x11, 0x800) msgrcv(0x0, &(0x7f0000000480), 0x3c, 0x1, 0x3800) 1.160194134s ago: executing program 4 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000280), 0x12) sendfile(r4, r7, 0x0, 0xfffffffe) 1.158273844s ago: executing program 3 (id=1566): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/104, 0x68, 0x0, &(0x7f0000000240)=""/176, 0xb0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x11) ioctl$TCSETSW2(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000140)='./file0\x00', 0x284c0, 0x5a0d2d8f9c36d101) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 991.448586ms ago: executing program 3 (id=1567): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x4, 0x6, 0x2fe0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 582.630527ms ago: executing program 2 (id=1568): syz_open_pts(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000400"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 534.46442ms ago: executing program 2 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) getresuid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4e2, &(0x7f0000000b80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() 361.869303ms ago: executing program 4 (id=1570): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)\x9c\x91\xdaR\xe2\x96\x8e-\f\x00)-\xa5\x12\x17\xbf\x91g\xc1V\x7f\xd8]`y\xf2o\x05\x9a\xcaZ\x832b/\x99\x8d\xeb\x00', 0x5) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@data_err_ignore}, {@nodelalloc}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@quota}]}, 0x3, 0x465, &(0x7f0000000c00)="$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") r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x1a1381) unshare(0x8040480) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000100)=[{r4, 0x3605}], 0x1, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x82, 0x3) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @remote}, "5ba15ff1981b1b1f"}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0]) close(r1) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 240.595172ms ago: executing program 4 (id=1571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x23d, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 107.307732ms ago: executing program 3 (id=1572): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001480)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r1, 0x46f6, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001080006040001e97fa2e74c0a0ad1000057330377ba25ac1414"], 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0x4, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=1573): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x3c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) getpid() sendfile(r5, r4, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): n_get:1396: comm syz.3.785: couldn't read orphan inode 15 (err -117) [ 109.078101][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.099037][ T6498] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.106731][ T6498] team0: Device ipvlan2 failed to register rx_handler [ 109.223689][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.234491][ T6501] bridge0: entered allmulticast mode [ 109.253566][ T6501] bridge_slave_1: left allmulticast mode [ 109.259372][ T6501] bridge_slave_1: left promiscuous mode [ 109.265229][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.278730][ T6501] bridge_slave_0: left allmulticast mode [ 109.284546][ T6501] bridge_slave_0: left promiscuous mode [ 109.290363][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.624430][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.632511][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.640006][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.647663][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.655127][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.663115][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.670528][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.678471][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.685884][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.693254][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.700957][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.708464][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.716218][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.724036][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.731780][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.739221][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.746735][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.754327][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.761779][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.769279][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.776835][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.784329][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.791847][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.799381][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.806875][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.814349][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.821947][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829457][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829480][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829499][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829532][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829573][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829593][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829615][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829634][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829653][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829672][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829720][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829740][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829759][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829778][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829799][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.829821][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.851230][ T3338] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.878183][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 109.878226][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.878270][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.886638][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.886722][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.015532][ T6517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.068121][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 110.068135][ T29] audit: type=1326 audit(1725241448.185:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.098179][ T29] audit: type=1326 audit(1725241448.185:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.137345][ T29] audit: type=1326 audit(1725241448.195:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.161302][ T29] audit: type=1326 audit(1725241448.195:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.185258][ T29] audit: type=1326 audit(1725241448.195:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.208856][ T29] audit: type=1326 audit(1725241448.195:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.221713][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 110.232684][ T29] audit: type=1326 audit(1725241448.195:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.264988][ T29] audit: type=1326 audit(1725241448.195:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.288392][ T29] audit: type=1326 audit(1725241448.195:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.311909][ T29] audit: type=1326 audit(1725241448.195:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 110.378557][ T6539] loop3: detected capacity change from 0 to 512 [ 110.436707][ T6539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.469114][ T6524] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.483519][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 110.492632][ T6539] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.535201][ T6539] EXT4-fs: Cannot change quota options when quota turned on [ 110.559885][ T6539] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #18: comm syz.3.796: corrupted inode contents [ 110.579230][ T6539] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.796: mark_inode_dirty error [ 110.591617][ T6539] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #18: comm syz.3.796: corrupted inode contents [ 110.624800][ T6539] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #18: comm syz.3.796: mark_inode_dirty error [ 110.654803][ T6539] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #18: comm syz.3.796: mark inode dirty (error -117) [ 110.675572][ T6539] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 110.686258][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 111.063104][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.452963][ T6582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 111.459520][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.467238][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 111.664301][ T24] vhci_hcd: vhci_device speed not set [ 111.705759][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 111.734337][ T24] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 111.746621][ T6602] loop1: detected capacity change from 0 to 512 [ 111.758545][ T6602] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.817: casefold flag without casefold feature [ 111.771408][ T6602] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.817: couldn't read orphan inode 15 (err -117) [ 111.784035][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.805407][ T6602] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.818299][ T6602] team0: Device ipvlan2 failed to register rx_handler [ 111.960515][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.014119][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'. [ 112.055331][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 112.163450][ T6584] vhci_hcd: connection reset by peer [ 112.169269][ T327] vhci_hcd: stop threads [ 112.173529][ T327] vhci_hcd: release socket [ 112.177994][ T327] vhci_hcd: disconnect device [ 112.439105][ T6634] loop3: detected capacity change from 0 to 4096 [ 112.512416][ T6634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.657915][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.692888][ T6645] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.737044][ T6651] loop1: detected capacity change from 0 to 256 [ 112.789964][ T6657] vcan0: Master is either lo or non-ether device [ 112.892893][ T6662] @ÿ: renamed from veth0_vlan [ 112.927379][ T6660] dns_resolver: Unsupported content type (1) [ 113.017643][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 113.125382][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 113.167926][ T6683] rdma_op ffff88813097b180 conn xmit_rdma 0000000000000000 [ 113.235928][ T6689] delete_channel: no stack [ 113.297735][ T6694] delete_channel: no stack [ 113.334764][ T6695] vcan0: Master is either lo or non-ether device [ 113.402934][ T6701] loop3: detected capacity change from 0 to 512 [ 113.436223][ T6701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.450009][ T6701] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.511745][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.549595][ T6713] @ÿ: renamed from veth0_vlan (while UP) [ 113.614248][ T6703] dns_resolver: Unsupported content type (1) [ 113.857936][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 114.031185][ T6729] vcan0: Master is either lo or non-ether device [ 114.050202][ T6736] loop1: detected capacity change from 0 to 128 [ 114.065805][ T6736] msdos: Unknown parameter 'ÿ' [ 114.454842][ T6755] 9pnet_fd: Insufficient options for proto=fd [ 114.689206][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 114.765396][ T6763] loop1: detected capacity change from 0 to 512 [ 114.781922][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.794608][ T6763] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.813414][ T6763] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.873: Directory hole found for htree leaf block 0 [ 115.248104][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.248494][ T6775] loop3: detected capacity change from 0 to 1024 [ 115.266208][ T6775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.308150][ T6775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.360529][ T6781] netlink: 'syz.4.880': attribute type 2 has an invalid length. [ 115.381401][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 115.381414][ T29] audit: type=1326 audit(1725241453.495:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.411631][ T29] audit: type=1326 audit(1725241453.515:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.435245][ T29] audit: type=1326 audit(1725241453.515:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.458797][ T29] audit: type=1326 audit(1725241453.515:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.482518][ T29] audit: type=1326 audit(1725241453.515:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.505970][ T29] audit: type=1326 audit(1725241453.515:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.529695][ T29] audit: type=1326 audit(1725241453.515:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.536438][ T6790] delete_channel: no stack [ 115.553264][ T29] audit: type=1326 audit(1725241453.515:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.572606][ T6790] delete_channel: no stack [ 115.581872][ T29] audit: type=1326 audit(1725241453.515:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.603304][ T6787] rdma_op ffff8881122dbd80 conn xmit_rdma 0000000000000000 [ 115.609651][ T29] audit: type=1326 audit(1725241453.515:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 115.655471][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.704805][ T6797] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.844853][ T6797] loop3: detected capacity change from 0 to 2048 [ 115.853255][ T6797] EXT4-fs: Ignoring removed orlov option [ 115.872784][ T6797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.928147][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.407979][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888115e58000: rx timeout, send abort [ 116.541112][ T6822] loop1: detected capacity change from 0 to 512 [ 116.567582][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.580169][ T6822] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.596569][ T6822] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.894: Directory hole found for htree leaf block 0 [ 116.764431][ T24] usb 5-1: enqueue for inactive port 0 [ 116.771015][ T24] usb 5-1: enqueue for inactive port 0 [ 116.864203][ T24] vhci_hcd: vhci_device speed not set [ 116.916702][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888115e58000: abort rx timeout. Force session deactivation [ 117.021795][ T6829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6829 comm=syz.2.895 [ 117.108763][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.233513][ T6848] syz.4.907[6848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.233570][ T6848] syz.4.907[6848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.310356][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 118.727614][ T6877] bond_slave_1: entered promiscuous mode [ 118.749657][ T6877] macsec1: entered allmulticast mode [ 118.755119][ T6877] bond0: entered allmulticast mode [ 118.760232][ T6877] bond_slave_1: entered allmulticast mode [ 118.772828][ T6877] bond0: left allmulticast mode [ 118.777785][ T6877] bond_slave_1: left allmulticast mode [ 118.783328][ T6877] bond_slave_1: left promiscuous mode [ 118.819904][ T6879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6879 comm=syz.0.916 [ 118.871170][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 118.911561][ T6897] loop1: detected capacity change from 0 to 512 [ 118.948467][ T6897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.972148][ T6897] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.014021][ T6897] EXT4-fs: Cannot change quota options when quota turned on [ 119.023079][ T6897] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #18: comm syz.1.923: corrupted inode contents [ 119.035384][ T6897] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #18: comm syz.1.923: mark_inode_dirty error [ 119.047167][ T6897] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #18: comm syz.1.923: corrupted inode contents [ 119.060326][ T6897] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #18: comm syz.1.923: mark_inode_dirty error [ 119.072710][ T6897] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #18: comm syz.1.923: mark inode dirty (error -117) [ 119.085915][ T6897] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 119.097750][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881159d5000: rx timeout, send abort [ 119.364820][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.607362][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881159d5000: abort rx timeout. Force session deactivation [ 120.275031][ T6929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6929 comm=syz.3.933 [ 120.368264][ T6932] bond_slave_0: entered promiscuous mode [ 120.373934][ T6932] bond_slave_1: entered promiscuous mode [ 120.391487][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 120.395595][ T6932] macsec1: entered allmulticast mode [ 120.405802][ T6932] bond0: entered allmulticast mode [ 120.411034][ T6932] bond_slave_0: entered allmulticast mode [ 120.416856][ T6932] bond_slave_1: entered allmulticast mode [ 120.432143][ T6939] loop1: detected capacity change from 0 to 1024 [ 120.440286][ T6932] bond0: left allmulticast mode [ 120.445259][ T6932] bond_slave_0: left allmulticast mode [ 120.450782][ T6932] bond_slave_1: left allmulticast mode [ 120.456338][ T6932] bond_slave_0: left promiscuous mode [ 120.461730][ T6932] bond_slave_1: left promiscuous mode [ 120.464716][ T6939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.505548][ T6939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.534083][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 120.534098][ T29] audit: type=1400 audit(1725241458.645:4569): avc: denied { execute } for pid=6925 comm="syz.2.932" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 120.656534][ T6952] 9pnet: Could not find request transport: fd0x0000000000000007 [ 120.730605][ T29] audit: type=1326 audit(1725241458.845:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.754174][ T29] audit: type=1326 audit(1725241458.845:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.778592][ T29] audit: type=1326 audit(1725241458.845:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.793181][ T6958] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 120.793181][ T6958] The task syz.3.941 (6958) triggered the difference, watch for misbehavior. [ 120.802061][ T29] audit: type=1326 audit(1725241458.845:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.843360][ T29] audit: type=1326 audit(1725241458.845:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.867065][ T29] audit: type=1326 audit(1725241458.905:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.890555][ T29] audit: type=1326 audit(1725241458.905:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.918532][ T29] audit: type=1326 audit(1725241458.905:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 120.942231][ T29] audit: type=1326 audit(1725241459.015:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 121.330631][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.023125][ T6988] loop1: detected capacity change from 0 to 512 [ 122.033618][ T6991] netlink: 'syz.0.951': attribute type 2 has an invalid length. [ 122.049868][ T6988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.080999][ T6988] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.337531][ T7010] team0: entered promiscuous mode [ 122.342599][ T7010] team_slave_0: entered promiscuous mode [ 122.348496][ T7010] team_slave_1: entered promiscuous mode [ 122.365774][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.379279][ T7010] team0: left promiscuous mode [ 122.384201][ T7010] team_slave_0: left promiscuous mode [ 122.389753][ T7010] team_slave_1: left promiscuous mode [ 122.395235][ T7014] 9pnet: Could not find request transport: fd0x0000000000000007 [ 122.422615][ T7016] syzkaller0: entered promiscuous mode [ 122.428173][ T7016] syzkaller0: entered allmulticast mode [ 122.528244][ T7023] syzkaller0: entered promiscuous mode [ 122.534107][ T7023] syzkaller0: entered allmulticast mode [ 122.906225][ T7028] loop1: detected capacity change from 0 to 4096 [ 122.914907][ T7028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.448967][ T7046] syzkaller0: entered promiscuous mode [ 123.454523][ T7046] syzkaller0: entered allmulticast mode [ 123.508027][ T7048] syzkaller0: entered promiscuous mode [ 123.513551][ T7048] syzkaller0: entered allmulticast mode [ 123.769578][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.176745][ T7065] loop3: detected capacity change from 0 to 128 [ 124.375185][ T7070] usb usb8: usbfs: process 7070 (syz.2.977) did not claim interface 0 before use [ 124.584429][ T7070] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 125.719369][ T7098] loop3: detected capacity change from 0 to 512 [ 125.759742][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.773551][ T7098] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.801796][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.011292][ T7107] syzkaller0: entered promiscuous mode [ 126.016962][ T7107] syzkaller0: entered allmulticast mode [ 126.281317][ T7116] loop1: detected capacity change from 0 to 1024 [ 126.289573][ T7116] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.310908][ T7114] usb usb8: usbfs: process 7114 (syz.4.991) did not claim interface 0 before use [ 126.320511][ T7116] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 126.328543][ T7114] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 126.336206][ T7116] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.361977][ T7116] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.993: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.381683][ T7116] EXT4-fs (loop1): 1 orphan inode deleted [ 126.387959][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.426426][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.993: path /114/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 126.446100][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.466696][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 18: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.487530][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.510206][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.530818][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 21: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.552320][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 22: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.573453][ T7116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 23: comm syz.1.993: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.671575][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.692014][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 126.692027][ T29] audit: type=1326 audit(1725241464.805:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.726328][ T29] audit: type=1326 audit(1725241464.835:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.750009][ T29] audit: type=1326 audit(1725241464.835:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.773670][ T29] audit: type=1326 audit(1725241464.835:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.797069][ T29] audit: type=1326 audit(1725241464.835:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.820684][ T29] audit: type=1326 audit(1725241464.835:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.844104][ T29] audit: type=1326 audit(1725241464.835:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.867484][ T29] audit: type=1326 audit(1725241464.835:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.890903][ T29] audit: type=1326 audit(1725241464.835:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 126.914901][ T29] audit: type=1326 audit(1725241464.835:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c129eb9 code=0x7ffc0000 [ 127.640893][ T7158] syzkaller0: entered promiscuous mode [ 127.647857][ T7158] syzkaller0: entered allmulticast mode [ 128.316879][ T7170] loop1: detected capacity change from 0 to 512 [ 128.325174][ T7170] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 128.339116][ T7170] EXT4-fs (loop1): invalid journal inode [ 128.386541][ T7166] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 128.524754][ T7177] loop1: detected capacity change from 0 to 4096 [ 128.570848][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.774266][ T7177] loop1: detected capacity change from 4096 to 0 [ 128.788582][ T5354] syz-executor: attempt to access beyond end of device [ 128.788582][ T5354] loop1: rw=12288, sector=128, nr_sectors = 8 limit=0 [ 128.810721][ T5354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.826527][ T5354] syz-executor: attempt to access beyond end of device [ 128.826527][ T5354] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 128.840052][ T5354] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 128.864655][ T5354] EXT4-fs (loop1): I/O error while writing superblock [ 129.058684][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 129.100938][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.108288][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.115652][ T7194] bridge_slave_0: entered allmulticast mode [ 129.190191][ T7194] bridge_slave_0: entered promiscuous mode [ 129.197431][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.204709][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.223957][ T7194] bridge_slave_1: entered allmulticast mode [ 129.246839][ T7194] bridge_slave_1: entered promiscuous mode [ 129.287869][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.303034][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.341565][ T7194] team0: Port device team_slave_0 added [ 129.355177][ T7194] team0: Port device team_slave_1 added [ 129.391608][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.399090][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.425188][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.495315][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.502366][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.528621][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.615128][ T7241] loop3: detected capacity change from 0 to 512 [ 129.651337][ T7241] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 129.659569][ T7241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 129.679938][ T7194] hsr_slave_0: entered promiscuous mode [ 129.689063][ T7241] System zones: 0-1, 15-15, 18-18, 34-34 [ 129.697774][ T7194] hsr_slave_1: entered promiscuous mode [ 129.707286][ T7241] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.713920][ T7241] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 129.728918][ T7241] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 129.744938][ T7194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.771456][ T7194] Cannot create hsr debugfs directory [ 129.781927][ T7241] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1030: bg 0: block 40: padding at end of block bitmap is not set [ 129.850043][ T7241] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 129.883012][ T7241] EXT4-fs (loop3): 1 truncate cleaned up [ 129.900897][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.930806][ T7241] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1030: bad symlink. [ 129.955321][ T7194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.979730][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.090893][ T7257] loop3: detected capacity change from 0 to 512 [ 130.130844][ T7257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.201498][ T7194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.287994][ T7194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.303918][ T7257] EXT4-fs (loop3): 1 truncate cleaned up [ 130.317581][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.340192][ T7261] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 130.385465][ T7194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.496856][ T7194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.514406][ T7194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 130.531998][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 130.533529][ T7194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.560872][ T7194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.616644][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.632019][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.681203][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.688396][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.743894][ T7194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.754379][ T7194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.790498][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.797707][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.918678][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.019717][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.076146][ T7194] veth0_vlan: entered promiscuous mode [ 131.098675][ T7194] veth1_vlan: entered promiscuous mode [ 131.146924][ T7194] veth0_macvtap: entered promiscuous mode [ 131.159347][ T7194] veth1_macvtap: entered promiscuous mode [ 131.196150][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.206876][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.239560][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.256607][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.267112][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.297988][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.315795][ T7194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.324590][ T7194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.333282][ T7194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.341998][ T7194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.616346][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 131.625417][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 131.647151][ T7305] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 131.661502][ T7305] team0: entered promiscuous mode [ 131.666617][ T7305] team_slave_0: entered promiscuous mode [ 131.707939][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 131.707953][ T29] audit: type=1400 audit(1725241469.825:4936): avc: denied { append } for pid=7319 comm="syz.4.1052" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.790122][ T7328] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1054'. [ 131.837670][ T7325] syzkaller0: entered promiscuous mode [ 131.843270][ T7325] syzkaller0: entered allmulticast mode [ 132.092157][ T7335] hub 6-0:1.0: USB hub found [ 132.135098][ T7335] hub 6-0:1.0: 8 ports detected [ 132.195067][ T29] audit: type=1400 audit(1725241470.225:4937): avc: denied { map_create } for pid=7336 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.214387][ T29] audit: type=1400 audit(1725241470.235:4938): avc: denied { prog_load } for pid=7336 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.233508][ T29] audit: type=1400 audit(1725241470.235:4939): avc: denied { bpf } for pid=7336 comm="syz.3.1057" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.254026][ T29] audit: type=1400 audit(1725241470.235:4940): avc: denied { perfmon } for pid=7336 comm="syz.3.1057" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.274894][ T29] audit: type=1400 audit(1725241470.295:4941): avc: denied { create } for pid=7331 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.336751][ T29] audit: type=1400 audit(1725241470.445:4942): avc: denied { read write } for pid=5507 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.361147][ T29] audit: type=1400 audit(1725241470.445:4943): avc: denied { open } for pid=5507 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.385589][ T29] audit: type=1400 audit(1725241470.445:4944): avc: denied { ioctl } for pid=5507 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.411528][ T29] audit: type=1326 audit(1725241470.455:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x0 [ 132.818520][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.828380][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.035136][ T7372] netlink: 'syz.0.1069': attribute type 4 has an invalid length. [ 133.042916][ T7372] netlink: 208132 bytes leftover after parsing attributes in process `syz.0.1069'. [ 133.360612][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.369345][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.438419][ T7385] loop1: detected capacity change from 0 to 256 [ 133.447021][ T7385] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.461245][ T7385] Process accounting resumed [ 133.985772][ T7402] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1078'. [ 133.995087][ T7402] unsupported nlmsg_type 40 [ 134.160577][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1080'. [ 134.592577][ T7419] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 135.057206][ T7437] netlink: 'syz.0.1093': attribute type 14 has an invalid length. [ 136.264792][ T7473] loop1: detected capacity change from 0 to 512 [ 136.271248][ T7473] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 136.283641][ T7473] x_tables: unsorted entry at hook 2 [ 136.380062][ T7481] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.596599][ T7488] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.606809][ T7488] sg_write: data in/out 67174620/120 bytes for SCSI command 0x8-- guessing data in; [ 136.606809][ T7488] program syz.2.1108 not setting count and/or reply_len properly [ 136.683831][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 136.707640][ T7491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.827425][ T7491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.899279][ T7491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.914901][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.953729][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.003286][ T7491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.107626][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 137.107641][ T29] audit: type=1326 audit(1725241475.225:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.137939][ T29] audit: type=1326 audit(1725241475.225:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.161482][ T29] audit: type=1326 audit(1725241475.225:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.185072][ T29] audit: type=1326 audit(1725241475.225:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.208634][ T29] audit: type=1326 audit(1725241475.225:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.244604][ T29] audit: type=1326 audit(1725241475.365:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.265305][ T7491] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.268575][ T29] audit: type=1326 audit(1725241475.365:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.279603][ T7491] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.300321][ T29] audit: type=1326 audit(1725241475.365:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.311709][ T7491] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.343645][ T7491] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.352406][ T29] audit: type=1326 audit(1725241475.455:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.376090][ T29] audit: type=1326 audit(1725241475.455:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x7ffc0000 [ 137.394869][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 137.517132][ T7505] vlan2: entered promiscuous mode [ 137.522491][ T7505] dummy0: entered promiscuous mode [ 137.531232][ T7505] vlan2: entered allmulticast mode [ 137.536911][ T7505] dummy0: entered allmulticast mode [ 137.656291][ T7509] syzkaller0: entered promiscuous mode [ 137.661877][ T7509] syzkaller0: entered allmulticast mode [ 137.833830][ T7527] loop1: detected capacity change from 0 to 512 [ 137.848207][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.861407][ T7527] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.909217][ T7194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.931555][ T7533] loop1: detected capacity change from 0 to 1024 [ 137.945515][ T7533] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1122: bad orphan inode 2097152 [ 137.951851][ T7537] loop3: detected capacity change from 0 to 512 [ 137.959008][ T7533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.962658][ T7537] ext4: Bad value for 'debug_want_extra_isize' [ 138.000649][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 138.022655][ T7194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.043192][ T7539] loop1: detected capacity change from 0 to 256 [ 138.059784][ T7539] FAT-fs (loop1): codepage cp869 not found [ 138.261172][ T7542] syz.1.1124[7542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.261229][ T7542] syz.1.1124[7542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.284095][ T7542] loop1: detected capacity change from 0 to 512 [ 138.327951][ T7542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.340594][ T7542] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.376814][ T7542] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1124: Directory hole found for htree leaf block 0 [ 138.540636][ T7546] loop3: detected capacity change from 0 to 512 [ 138.547340][ T7546] EXT4-fs (loop3): unsupported inode size: 264 [ 138.553516][ T7546] EXT4-fs (loop3): blocksize: 1024 [ 138.655304][ T7554] sd 0:0:1:0: device reset [ 138.927938][ T7194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.966935][ T7566] netlink: 'syz.1.1132': attribute type 15 has an invalid length. [ 138.975001][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 139.073352][ T7564] loop3: detected capacity change from 0 to 1024 [ 139.109475][ T7564] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 139.289442][ T7563] loop3: detected capacity change from 0 to 4096 [ 139.296187][ T7563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.307843][ T7563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.323372][ T7563] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.1131: corrupted inode contents [ 139.335843][ T7563] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.1131: mark_inode_dirty error [ 139.348819][ T7563] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.1131: corrupted inode contents [ 139.361015][ T7563] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1131: mark_inode_dirty error [ 139.383359][ T7563] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.1131: corrupted inode contents [ 139.396805][ T7563] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1131: mark_inode_dirty error [ 139.409057][ T7563] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.1131: corrupted inode contents [ 139.421520][ T7563] EXT4-fs error (device loop3): ext4_truncate:4241: inode #15: comm syz.3.1131: mark_inode_dirty error [ 139.433484][ T7563] EXT4-fs error (device loop3): ext4_evict_inode:262: comm syz.3.1131: couldn't truncate inode 15 (err -117) [ 139.709412][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.966182][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.021037][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.934621][ T7605] loop3: detected capacity change from 0 to 1024 [ 140.945558][ T7605] EXT4-fs: Ignoring removed orlov option [ 140.951298][ T7605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.982767][ T7605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.021568][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.024952][ T7611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18578 sclass=netlink_route_socket pid=7611 comm=syz.4.1146 [ 141.459395][ T7627] hub 6-0:1.0: USB hub found [ 141.479556][ T7627] hub 6-0:1.0: 8 ports detected [ 141.859546][ T7631] syzkaller0: entered promiscuous mode [ 141.865086][ T7631] syzkaller0: entered allmulticast mode [ 142.277778][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.287529][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.618681][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 142.618696][ T29] audit: type=1400 audit(1725241480.735:5320): avc: denied { create } for pid=7641 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.645114][ T29] audit: type=1400 audit(1725241480.735:5321): avc: denied { ioctl } for pid=7641 comm="syz.3.1156" path="socket:[18092]" dev="sockfs" ino=18092 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.682337][ T29] audit: type=1326 audit(1725241480.795:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.706872][ T29] audit: type=1326 audit(1725241480.795:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.715632][ T7649] loop3: detected capacity change from 0 to 512 [ 142.730313][ T29] audit: type=1326 audit(1725241480.795:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.759885][ T29] audit: type=1326 audit(1725241480.795:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.763608][ T7649] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.783362][ T29] audit: type=1326 audit(1725241480.795:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.783415][ T29] audit: type=1326 audit(1725241480.795:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.839664][ T29] audit: type=1326 audit(1725241480.795:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 142.863246][ T29] audit: type=1326 audit(1725241480.795:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.3.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5c2d4bdd7 code=0x7ffc0000 [ 142.889696][ T7649] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1158: bg 0: block 64: padding at end of block bitmap is not set [ 142.904355][ T7649] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1158: Failed to acquire dquot type 0 [ 142.915984][ T7649] EXT4-fs (loop3): 1 truncate cleaned up [ 142.922069][ T7649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.943010][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.000282][ T7661] pim6reg1: entered promiscuous mode [ 143.009156][ T7661] pim6reg1: entered allmulticast mode [ 143.254910][ T7671] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 143.262739][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 143.702812][ T7677] loop1: detected capacity change from 0 to 1024 [ 143.733077][ T7679] syzkaller0: entered promiscuous mode [ 143.738705][ T7679] syzkaller0: entered allmulticast mode [ 143.750484][ T7677] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 144.089589][ T7677] loop1: detected capacity change from 0 to 4096 [ 144.114647][ T7677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.163276][ T7677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.289271][ T7677] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.1165: corrupted inode contents [ 144.364395][ T7677] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #15: comm syz.1.1165: mark_inode_dirty error [ 144.404050][ T7677] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.1165: corrupted inode contents [ 144.448483][ T7677] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.1165: mark_inode_dirty error [ 144.464003][ T7693] syzkaller0: entered promiscuous mode [ 144.469611][ T7693] syzkaller0: entered allmulticast mode [ 144.507569][ T7677] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.1165: corrupted inode contents [ 144.558672][ T7677] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.1165: mark_inode_dirty error [ 144.617576][ T7677] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.1165: corrupted inode contents [ 144.674383][ T7677] EXT4-fs error (device loop1): ext4_truncate:4241: inode #15: comm syz.1.1165: mark_inode_dirty error [ 144.709623][ T7677] EXT4-fs error (device loop1): ext4_evict_inode:262: comm syz.1.1165: couldn't truncate inode 15 (err -117) [ 144.804944][ T7194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.098396][ T7721] loop1: detected capacity change from 0 to 2048 [ 145.136542][ T7721] EXT4-fs: Ignoring removed bh option [ 145.142035][ T7721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.159037][ T7721] EXT4-fs: Ignoring removed nobh option [ 145.214927][ T7721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.265990][ T7721] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.294835][ T7721] EXT4-fs error (device loop1): __ext4_remount:6491: comm syz.1.1179: Abort forced by user [ 145.316455][ T7721] EXT4-fs (loop1): Remounting filesystem read-only [ 145.325255][ T7721] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 145.346493][ T7721] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 145.356985][ T7721] raw_sendmsg: syz.1.1179 forgot to set AF_INET. Fix it! [ 145.383191][ T7194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.413634][ T7732] loop1: detected capacity change from 0 to 256 [ 145.449566][ T7736] loop3: detected capacity change from 0 to 256 [ 145.464387][ T7732] FAT-fs (loop1): codepage cp949 not found [ 145.679582][ T7742] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.689382][ T7742] SELinux: failed to load policy [ 145.830238][ T7745] loop3: detected capacity change from 0 to 1024 [ 145.890507][ T7745] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.961078][ T7745] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.979495][ T7745] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.986153][ T7745] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.1187: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.000222][ T7745] EXT4-fs (loop3): 1 orphan inode deleted [ 146.006521][ T7745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.042157][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.1187: path /122/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 146.072949][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.101518][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 18: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.149001][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.186406][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.218919][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 21: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.275280][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 22: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.329771][ T7745] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 23: comm syz.3.1187: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.466357][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.690823][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 147.690839][ T29] audit: type=1400 audit(1725241485.805:5545): avc: denied { create } for pid=7790 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.734255][ T29] audit: type=1400 audit(1725241485.825:5546): avc: denied { create } for pid=7790 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.793795][ T29] audit: type=1400 audit(1725241485.905:5547): avc: denied { connect } for pid=7790 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.916343][ T29] audit: type=1326 audit(1725241486.035:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 147.939845][ T29] audit: type=1326 audit(1725241486.035:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 147.964385][ T29] audit: type=1326 audit(1725241486.075:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 147.987889][ T29] audit: type=1326 audit(1725241486.075:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 147.999407][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 148.011506][ T29] audit: type=1326 audit(1725241486.075:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 148.043946][ T29] audit: type=1326 audit(1725241486.075:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 148.049122][ T7806] syzkaller0: entered promiscuous mode [ 148.067631][ T29] audit: type=1326 audit(1725241486.085:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe012f59eb9 code=0x7ffc0000 [ 148.096604][ T7806] syzkaller0: entered allmulticast mode [ 148.147002][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1206'. [ 148.180139][ T7822] loop1: detected capacity change from 0 to 1024 [ 148.191999][ T7822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.206742][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.214319][ T7812] syzkaller0: entered promiscuous mode [ 148.225190][ T7812] syzkaller0: entered allmulticast mode [ 148.232167][ T7819] @: renamed from bond0 (while UP) [ 148.376797][ T7837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.520123][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.562464][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.816341][ T7846] loop3: detected capacity change from 0 to 512 [ 148.840658][ T7846] EXT4-fs: Invalid want_extra_isize 0 [ 148.863693][ T7846] loop3: detected capacity change from 0 to 256 [ 148.892755][ T7846] vfat: Bad value for 'dmask' [ 148.912434][ T7846] syz.3.1216 (7846): /proc/7845/oom_adj is deprecated, please use /proc/7845/oom_score_adj instead. [ 149.025924][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 149.185760][ T7857] pim6reg1: entered promiscuous mode [ 149.191449][ T7857] pim6reg1: entered allmulticast mode [ 149.241907][ T7194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.417813][ T7863] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 149.424681][ T7865] usb usb9: usbfs: process 7865 (syz.2.1223) did not claim interface 5 before use [ 149.471147][ T7863] team0: Failed to send options change via netlink (err -105) [ 149.478713][ T7863] team0: Port device netdevsim1 added [ 149.728016][ T7871] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.816939][ T7838] syz.4.1213 (7838) used greatest stack depth: 6296 bytes left [ 149.907614][ T7871] loop3: detected capacity change from 0 to 2048 [ 149.916288][ T7871] EXT4-fs: Ignoring removed orlov option [ 149.933885][ T7881] syzkaller0: entered promiscuous mode [ 149.939476][ T7881] syzkaller0: entered allmulticast mode [ 149.952236][ T7871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.985077][ T7871] vlan3: entered promiscuous mode [ 150.044708][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.055001][ T28] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 150.107466][ T7893] SELinux: Context system_u:object_r is not valid (left unmapped). [ 150.271028][ T7895] pim6reg1: entered promiscuous mode [ 150.276750][ T7895] pim6reg1: entered allmulticast mode [ 150.381620][ T7899] loop1: detected capacity change from 0 to 128 [ 150.390257][ T7899] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.402714][ T7899] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.793982][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 151.220688][ T7194] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.282735][ T7925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.614231][ T7934] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1244'. [ 151.707317][ T7937] syzkaller0: entered promiscuous mode [ 151.712807][ T7937] syzkaller0: entered allmulticast mode [ 152.827474][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 152.827489][ T29] audit: type=1400 audit(1725242258.976:5841): avc: denied { tracepoint } for pid=7979 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 152.865718][ T7980] loop3: detected capacity change from 0 to 128 [ 152.879009][ T7980] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.891142][ T7980] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.903102][ T29] audit: type=1400 audit(1725242259.060:5842): avc: denied { getopt } for pid=7979 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.947379][ T29] audit: type=1400 audit(1725242259.071:5843): avc: denied { create } for pid=7979 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.013577][ T7982] loop3: detected capacity change from 0 to 128 [ 153.029593][ T7982] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.044265][ T7982] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.053798][ T29] audit: type=1400 audit(1725242259.197:5844): avc: denied { mount } for pid=7983 comm="syz.1.1261" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.079622][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 153.079995][ T29] audit: type=1400 audit(1725242259.239:5845): avc: denied { unmount } for pid=7194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.088721][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 153.118443][ T29] audit: type=1400 audit(1725242259.281:5846): avc: denied { unmount } for pid=7194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.120596][ T7982] batadv0: entered promiscuous mode [ 153.149868][ T7982] batadv_slave_1: entered promiscuous mode [ 153.155906][ T7982] batadv_slave_1: left promiscuous mode [ 153.162142][ T7982] batadv0: left promiscuous mode [ 153.227594][ T7988] loop3: detected capacity change from 0 to 2048 [ 153.237483][ T7988] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.257642][ T7988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.272501][ T7988] syz.3.1263[7988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.272596][ T7988] syz.3.1263[7988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.286030][ T29] audit: type=1326 audit(1725242259.459:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 153.320780][ T29] audit: type=1326 audit(1725242259.459:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 153.344698][ T29] audit: type=1326 audit(1725242259.470:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 153.368107][ T29] audit: type=1326 audit(1725242259.470:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c2d49eb9 code=0x7ffc0000 [ 153.559209][ T8003] syzkaller0: entered promiscuous mode [ 153.565022][ T8003] syzkaller0: entered allmulticast mode [ 153.837255][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 153.914515][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.921594][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.942060][ T8008] bridge_slave_0: entered allmulticast mode [ 153.960080][ T8008] bridge_slave_0: entered promiscuous mode [ 153.970913][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.978084][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.005337][ T8008] bridge_slave_1: entered allmulticast mode [ 154.015322][ T8008] bridge_slave_1: entered promiscuous mode [ 154.028670][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.075426][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.099610][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.149845][ T8008] team0: Port device team_slave_0 added [ 154.156491][ T8008] team0: Port device team_slave_1 added [ 154.174376][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.181373][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.207404][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.223396][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.230666][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.256728][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.291414][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.334785][ T8008] hsr_slave_0: entered promiscuous mode [ 154.354679][ T8008] hsr_slave_1: entered promiscuous mode [ 154.362590][ T8008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.379567][ T8008] Cannot create hsr debugfs directory [ 154.390281][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.411554][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.427253][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.459682][ T50] team0: Port device netdevsim1 removed [ 154.468313][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.482575][ T8040] loop3: detected capacity change from 0 to 1024 [ 154.513897][ T8040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.549564][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.569793][ T8045] serio: Serial port ttyS3 [ 154.648645][ T50] bridge_slave_1: left allmulticast mode [ 154.654377][ T50] bridge_slave_1: left promiscuous mode [ 154.660272][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.695130][ T50] bridge_slave_0: left allmulticast mode [ 154.700869][ T50] bridge_slave_0: left promiscuous mode [ 154.706594][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.858266][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.869723][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.880577][ T50] bond0 (unregistering): Released all slaves [ 154.991613][ T50] hsr_slave_0: left promiscuous mode [ 154.997498][ T50] hsr_slave_1: left promiscuous mode [ 155.008263][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.015818][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.024531][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.032063][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.048406][ T50] veth1_macvtap: left promiscuous mode [ 155.053950][ T50] veth0_macvtap: left promiscuous mode [ 155.059655][ T50] veth1_vlan: left promiscuous mode [ 155.065076][ T50] veth0_vlan: left promiscuous mode [ 155.072657][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.172962][ T50] team0 (unregistering): Port device team_slave_1 removed [ 155.183460][ T50] team0 (unregistering): Port device team_slave_0 removed [ 155.365730][ T8008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.379649][ T8008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.383271][ T8123] syz.0.1287[8123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.386502][ T8123] syz.0.1287[8123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.400786][ T8008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.430753][ T8008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.478481][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.492851][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.519409][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.526835][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.536792][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.543985][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.688834][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.850132][ T8145] nlmon0: entered promiscuous mode [ 155.881708][ T8145] vlan3: entered promiscuous mode [ 155.896838][ T8145] nlmon0: left promiscuous mode [ 155.983572][ T8008] veth0_vlan: entered promiscuous mode [ 156.004105][ T8008] veth1_vlan: entered promiscuous mode [ 156.039683][ T8008] veth0_macvtap: entered promiscuous mode [ 156.055237][ T8008] veth1_macvtap: entered promiscuous mode [ 156.080471][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.091024][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.112404][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.129232][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.139809][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.177433][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.238677][ T8008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.248669][ T8008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.257490][ T8008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.266461][ T8008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.418908][ T8200] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1294'. [ 156.553048][ T8208] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.622644][ T8208] loop1: detected capacity change from 0 to 2048 [ 156.632525][ T8208] EXT4-fs: Ignoring removed orlov option [ 156.657644][ T8208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.710001][ T8227] loop3: detected capacity change from 0 to 512 [ 156.726550][ T8227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.756591][ T8227] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.786882][ T8209] vlan2: entered promiscuous mode [ 156.881093][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.901313][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.946553][ T8234] netlink: 'syz.3.1301': attribute type 11 has an invalid length. [ 157.748877][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 157.748911][ T29] audit: type=1400 audit(1725242264.141:6064): avc: denied { getopt } for pid=8271 comm="syz.3.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.860976][ T8289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8289 comm=syz.2.1311 [ 157.882150][ T29] audit: type=1400 audit(1725242264.278:6065): avc: denied { bind } for pid=8290 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.951232][ T29] audit: type=1400 audit(1725242264.309:6066): avc: denied { read } for pid=8288 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.052449][ T29] audit: type=1400 audit(1725242264.425:6067): avc: denied { read } for pid=8298 comm="syz.0.1314" path="socket:[20293]" dev="sockfs" ino=20293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.097764][ T8312] hsr0: entered promiscuous mode [ 158.111713][ T29] audit: type=1400 audit(1725242264.519:6068): avc: denied { create } for pid=8311 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.172917][ T29] audit: type=1400 audit(1725242264.593:6069): avc: denied { sqpoll } for pid=8302 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.243613][ T8328] loop1: detected capacity change from 0 to 512 [ 158.279956][ T8328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.303713][ T29] audit: type=1400 audit(1725242264.719:6070): avc: denied { mounton } for pid=8335 comm="syz.2.1321" path="/290/file0" dev="configfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.315066][ T8328] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.326804][ T29] audit: type=1400 audit(1725242264.719:6071): avc: denied { search } for pid=8335 comm="syz.2.1321" name="/" dev="configfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.353792][ T29] audit: type=1326 audit(1725242264.729:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e32c9eb9 code=0x7ffc0000 [ 158.383560][ T29] audit: type=1326 audit(1725242264.729:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e32c9eb9 code=0x7ffc0000 [ 158.423102][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.466970][ T50] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.527365][ T50] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.564679][ T8376] ip6gretap0: entered promiscuous mode [ 158.571738][ T8376] batadv_slave_0: entered promiscuous mode [ 158.577915][ T8376] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 158.585615][ T8376] Cannot create hsr debugfs directory [ 158.592815][ T8376] ip6gretap0: left promiscuous mode [ 158.598433][ T8376] batadv_slave_0: left promiscuous mode [ 158.609963][ T50] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.648094][ T8375] syzkaller0: entered promiscuous mode [ 158.653747][ T8375] syzkaller0: entered allmulticast mode [ 158.685238][ T50] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.708038][ T8386] netlink: 'syz.1.1331': attribute type 4 has an invalid length. [ 158.793456][ T8391] loop1: detected capacity change from 0 to 128 [ 158.836071][ T8391] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.857039][ T8391] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.951306][ T8391] syz.1.1332[8391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.951381][ T8391] syz.1.1332[8391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.030094][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.050970][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.061137][ T50] bond0 (unregistering): Released all slaves [ 159.097727][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 159.131080][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.138148][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.145614][ T8360] bridge_slave_0: entered allmulticast mode [ 159.152307][ T8360] bridge_slave_0: entered promiscuous mode [ 159.160693][ T50] hsr_slave_0: left promiscuous mode [ 159.166586][ T50] hsr_slave_1: left promiscuous mode [ 159.173200][ T50] dummy0: left allmulticast mode [ 159.178249][ T50] dummy0: left promiscuous mode [ 159.183273][ T50] veth1_macvtap: left promiscuous mode [ 159.188732][ T50] veth0_macvtap: left promiscuous mode [ 159.194271][ T50] veth1_vlan: left promiscuous mode [ 159.269741][ T50] team0 (unregistering): Port device team_slave_1 removed [ 159.279850][ T50] team0 (unregistering): Port device team_slave_0 removed [ 159.315378][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.322451][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.329778][ T8360] bridge_slave_1: entered allmulticast mode [ 159.336311][ T8360] bridge_slave_1: entered promiscuous mode [ 159.353902][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.364578][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.382146][ T8360] team0: Port device team_slave_0 added [ 159.390459][ T8360] team0: Port device team_slave_1 added [ 159.407367][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.414391][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.440382][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.454405][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.461551][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.487665][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.506017][ T8360] hsr_slave_0: entered promiscuous mode [ 159.512697][ T8360] hsr_slave_1: entered promiscuous mode [ 159.593848][ T8008] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.745534][ T8457] dummy0: entered promiscuous mode [ 159.750814][ T8457] vlan2: entered promiscuous mode [ 159.755938][ T8457] vlan2: entered allmulticast mode [ 159.761064][ T8457] dummy0: entered allmulticast mode [ 159.840093][ T8360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.848713][ T8360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.858102][ T8360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.871323][ T8360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.879141][ T8469] loop1: detected capacity change from 0 to 512 [ 159.888768][ T8469] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 159.902048][ T8469] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 159.915911][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.916217][ T8473] loop3: detected capacity change from 0 to 512 [ 159.924235][ T8469] EXT4-fs (loop1): 1 truncate cleaned up [ 159.930137][ T8473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.945634][ T8469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.946132][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.966395][ T8473] EXT4-fs (loop3): 1 orphan inode deleted [ 159.972341][ T8473] EXT4-fs (loop3): 1 truncate cleaned up [ 159.979098][ T8473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.995601][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.002799][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.011836][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.019048][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.040554][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.049590][ T8473] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 160.064783][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.082048][ T8473] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.092058][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'. [ 160.101220][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'. [ 160.110287][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 160.125831][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.138256][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.235925][ T8360] veth0_vlan: entered promiscuous mode [ 160.244730][ T8360] veth1_vlan: entered promiscuous mode [ 160.262727][ T8360] veth0_macvtap: entered promiscuous mode [ 160.270678][ T8360] veth1_macvtap: entered promiscuous mode [ 160.282715][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.293239][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.303180][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.313771][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.324910][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.336579][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.347167][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.357046][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.367589][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.379212][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.390210][ T8360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.398936][ T8360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.407746][ T8360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.416521][ T8360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.590294][ T8510] syzkaller0: entered promiscuous mode [ 160.595792][ T8510] syzkaller0: entered allmulticast mode [ 160.622534][ T8517] geneve2: entered promiscuous mode [ 160.627945][ T8517] geneve2: entered allmulticast mode [ 160.699322][ T8524] loop1: detected capacity change from 0 to 512 [ 160.706996][ T8524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.716453][ T8524] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 160.724547][ T8524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 160.733918][ T8524] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 160.743458][ T8524] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 160.754694][ T8524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.782320][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.865020][ T8537] loop1: detected capacity change from 0 to 2048 [ 160.886424][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.560585][ T8569] loop3: detected capacity change from 0 to 128 [ 161.600090][ T8569] syz.3.1380: attempt to access beyond end of device [ 161.600090][ T8569] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 161.629332][ T8569] syz.3.1380: attempt to access beyond end of device [ 161.629332][ T8569] loop3: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 161.648432][ T8569] syz.3.1380: attempt to access beyond end of device [ 161.648432][ T8569] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 161.661991][ T8569] Buffer I/O error on dev loop3, logical block 177, lost async page write [ 161.710394][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.805705][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.901866][ T8586] syzkaller0: entered promiscuous mode [ 161.907382][ T8586] syzkaller0: entered allmulticast mode [ 161.921916][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.985484][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.007945][ T8591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.017532][ T8591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.029425][ T8591] vlan3: entered promiscuous mode [ 162.034575][ T8591] batadv0: entered promiscuous mode [ 162.040072][ T8591] vlan3: entered allmulticast mode [ 162.045185][ T8591] batadv0: entered allmulticast mode [ 162.053634][ T8591] batadv0: left allmulticast mode [ 162.058751][ T8591] batadv0: left promiscuous mode [ 162.076713][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 162.085806][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.250200][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.260520][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.270866][ T28] bond0 (unregistering): Released all slaves [ 162.298809][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 162.329838][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.337029][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.344484][ T8593] bridge_slave_0: entered allmulticast mode [ 162.351028][ T8593] bridge_slave_0: entered promiscuous mode [ 162.358047][ T28] team0: left promiscuous mode [ 162.362893][ T28] team_slave_0: left promiscuous mode [ 162.370497][ T28] hsr_slave_0: left promiscuous mode [ 162.376577][ T28] hsr_slave_1: left promiscuous mode [ 162.383694][ T28] veth1_macvtap: left promiscuous mode [ 162.389234][ T28] veth0_macvtap: left promiscuous mode [ 162.394797][ T28] veth1_vlan: left promiscuous mode [ 162.400309][ T28] @ÿ: left promiscuous mode [ 162.470632][ T28] team0 (unregistering): Port device team_slave_0 removed [ 162.501511][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.508854][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.516514][ T8593] bridge_slave_1: entered allmulticast mode [ 162.523024][ T8593] bridge_slave_1: entered promiscuous mode [ 162.549194][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.559588][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.577489][ T8593] team0: Port device team_slave_0 added [ 162.584370][ T8593] team0: Port device team_slave_1 added [ 162.605879][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 162.605892][ T29] audit: type=1400 audit(1725242269.243:6391): avc: denied { ioctl } for pid=8607 comm="syz.0.1391" path="socket:[22852]" dev="sockfs" ino=22852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.628756][ T8611] loop3: detected capacity change from 0 to 512 [ 162.644248][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.651231][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.666825][ T29] audit: type=1400 audit(1725242269.254:6392): avc: denied { ioctl } for pid=8610 comm="syz.3.1392" path="socket:[21863]" dev="sockfs" ino=21863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.677140][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.714381][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.721518][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.747650][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.765540][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.767420][ T29] audit: type=1400 audit(1725242269.411:6393): avc: denied { create } for pid=8614 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.794798][ T8611] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.797890][ T29] audit: type=1400 audit(1725242269.411:6394): avc: denied { bind } for pid=8614 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.828234][ T29] audit: type=1400 audit(1725242269.411:6395): avc: denied { listen } for pid=8614 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.848274][ T29] audit: type=1400 audit(1725242269.411:6396): avc: denied { setopt } for pid=8614 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.880999][ T29] audit: type=1400 audit(1725242269.527:6397): avc: denied { create } for pid=8610 comm="syz.3.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 162.919199][ T8593] hsr_slave_0: entered promiscuous mode [ 162.921798][ T29] audit: type=1400 audit(1725242269.569:6398): avc: denied { append open } for pid=8610 comm="syz.3.1392" path="/160/file0/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.948868][ T29] audit: type=1400 audit(1725242269.569:6399): avc: denied { setopt } for pid=8610 comm="syz.3.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 162.968363][ T29] audit: type=1400 audit(1725242269.569:6400): avc: denied { write } for pid=8610 comm="syz.3.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.991767][ T8593] hsr_slave_1: entered promiscuous mode [ 162.993032][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1394'. [ 163.006461][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.014758][ T8593] Cannot create hsr debugfs directory [ 163.016595][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.073442][ T8633] 9p: Unknown access argument 18446744073709551615: -34 [ 163.378590][ T8593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.491782][ T8593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.545847][ T8593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.604119][ T8593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.650131][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.665152][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.677419][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.684513][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.704654][ T8593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.715217][ T8593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.732179][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.739346][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.808173][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.928636][ T8593] veth0_vlan: entered promiscuous mode [ 163.938614][ T8593] veth1_vlan: entered promiscuous mode [ 163.956719][ T8593] veth0_macvtap: entered promiscuous mode [ 163.964480][ T8593] veth1_macvtap: entered promiscuous mode [ 163.976505][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.987127][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.997229][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.008020][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.018069][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.028595][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.048437][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.059485][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.070402][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.080971][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.091861][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.102113][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.112562][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.128972][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.141700][ T8593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.150715][ T8593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.159600][ T8593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.168354][ T8593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.241517][ T8675] ip6gretap0: entered promiscuous mode [ 164.248214][ T8675] batadv_slave_0: entered promiscuous mode [ 164.256903][ T8675] ip6gretap0: left promiscuous mode [ 164.262853][ T8675] batadv_slave_0: left promiscuous mode [ 164.321339][ T8676] syzkaller0: entered promiscuous mode [ 164.326966][ T8676] syzkaller0: entered allmulticast mode [ 164.681472][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 164.691061][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 164.700247][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 164.750628][ T8694] syzkaller0: entered promiscuous mode [ 164.756366][ T8694] syzkaller0: entered allmulticast mode [ 165.436966][ T8725] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 165.443504][ T8725] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.451223][ T8725] vhci_hcd vhci_hcd.0: Device attached [ 165.460497][ T8725] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1421'. [ 165.470969][ T8728] vhci_hcd: connection closed [ 165.471146][ T50] vhci_hcd: stop threads [ 165.480154][ T50] vhci_hcd: release socket [ 165.484720][ T50] vhci_hcd: disconnect device [ 166.070971][ T8751] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1427'. [ 166.315604][ T8760] loop3: detected capacity change from 0 to 512 [ 166.335409][ T8760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.348022][ T8760] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.371147][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.463659][ T8770] syzkaller0: entered promiscuous mode [ 166.469283][ T8770] syzkaller0: entered allmulticast mode [ 167.373644][ T8792] ip6gretap0: entered promiscuous mode [ 167.380215][ T8792] batadv_slave_0: entered promiscuous mode [ 167.386518][ T8792] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.398732][ T8792] ip6gretap0: left promiscuous mode [ 167.404534][ T8792] batadv_slave_0: left promiscuous mode [ 167.418846][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 167.418859][ T29] audit: type=1400 audit(1725242274.293:6598): avc: denied { create } for pid=8788 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 167.421409][ T8795] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1440'. [ 167.526276][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 167.527459][ T8795] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1440'. [ 167.544522][ T8795] netlink: 69 bytes leftover after parsing attributes in process `syz.3.1440'. [ 167.574608][ T29] audit: type=1400 audit(1725242274.440:6599): avc: denied { bind } for pid=8798 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.669710][ T29] audit: type=1400 audit(1725242274.555:6600): avc: denied { ioctl } for pid=8808 comm="syz.0.1446" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.709527][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.726165][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.739010][ T29] audit: type=1400 audit(1725242274.629:6601): avc: denied { create } for pid=8810 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.943457][ T29] audit: type=1326 audit(1725242274.839:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.2.1449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02bfd69eb9 code=0x0 [ 168.006466][ T8820] loop3: detected capacity change from 0 to 4096 [ 168.020173][ T8820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.051485][ T29] audit: type=1400 audit(1725242274.965:6603): avc: denied { tracepoint } for pid=8826 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.071466][ T29] audit: type=1400 audit(1725242274.965:6604): avc: denied { write } for pid=8826 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.091632][ T29] audit: type=1400 audit(1725242274.965:6605): avc: denied { nlmsg_write } for pid=8826 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.139744][ T29] audit: type=1400 audit(1725242275.049:6606): avc: denied { ioctl } for pid=8831 comm="syz.4.1455" path="socket:[23622]" dev="sockfs" ino=23622 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.165853][ T29] audit: type=1400 audit(1725242275.049:6607): avc: denied { create } for pid=8831 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.187349][ T8840] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 168.541639][ T8852] syzkaller0: entered promiscuous mode [ 168.547250][ T8852] syzkaller0: entered allmulticast mode [ 168.547772][ T8854] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 168.559375][ T8854] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.567052][ T8854] vhci_hcd vhci_hcd.0: Device attached [ 168.584537][ T8854] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1459'. [ 168.594780][ T8857] vhci_hcd: connection closed [ 168.595835][ T40] vhci_hcd: stop threads [ 168.604865][ T40] vhci_hcd: release socket [ 168.609303][ T40] vhci_hcd: disconnect device [ 168.801029][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.819775][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 168.949564][ T8865] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1462'. [ 168.958787][ T8865] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1462'. [ 168.968008][ T8865] netlink: 69 bytes leftover after parsing attributes in process `syz.1.1462'. [ 169.089560][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1463'. [ 169.217623][ T8876] loop1: detected capacity change from 0 to 2048 [ 169.224776][ T8876] EXT4-fs: Ignoring removed orlov option [ 169.250776][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.272588][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 169.295810][ T8876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.364884][ T8876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.430071][ T8876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.509193][ T8876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.550731][ T8876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.562207][ T8876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.573434][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 169.582784][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1469'. [ 169.596543][ T8876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.614837][ T8876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.674520][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.987811][ T8911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.009048][ T8911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.038032][ T8911] vlan2: entered promiscuous mode [ 170.043167][ T8911] batadv0: entered promiscuous mode [ 170.048451][ T8911] vlan2: entered allmulticast mode [ 170.053585][ T8911] batadv0: entered allmulticast mode [ 170.070990][ T8913] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1476'. [ 170.082258][ T8911] batadv0: left allmulticast mode [ 170.087361][ T8911] batadv0: left promiscuous mode [ 170.698043][ T8931] syzkaller0: entered promiscuous mode [ 170.703686][ T8931] syzkaller0: entered allmulticast mode [ 170.715765][ T8934] loop1: detected capacity change from 0 to 2048 [ 170.729076][ T8934] EXT4-fs: Ignoring removed orlov option [ 170.759128][ T8934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.797914][ T8934] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.908383][ T8934] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.061116][ T8934] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.123573][ T8950] syz.0.1482[8950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.123720][ T8950] syz.0.1482[8950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.182116][ T8934] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.890973][ T8962] syzkaller0: entered promiscuous mode [ 171.896592][ T8962] syzkaller0: entered allmulticast mode [ 171.945129][ T8971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.954390][ T8971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.957709][ T8973] openvswitch: netlink: Key type 253 is out of range max 32 [ 171.988409][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.997187][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.475273][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 172.475287][ T29] audit: type=1326 audit(1725242279.605:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.0.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4163e99eb9 code=0x0 [ 172.626141][ T8986] netlink: 'syz.4.1499': attribute type 15 has an invalid length. [ 172.698271][ T29] audit: type=1400 audit(1725242279.836:6735): avc: denied { read } for pid=8985 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.726419][ T8882] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.760613][ T8882] EXT4-fs (loop1): Remounting filesystem read-only [ 172.801379][ T8990] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.891155][ T29] audit: type=1400 audit(1725242280.035:6736): avc: denied { read } for pid=8994 comm="syz.4.1502" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.914527][ T29] audit: type=1400 audit(1725242280.035:6737): avc: denied { open } for pid=8994 comm="syz.4.1502" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.964761][ T29] audit: type=1400 audit(1725242280.109:6738): avc: denied { ioctl } for pid=8994 comm="syz.4.1502" path="/dev/rtc0" dev="devtmpfs" ino=220 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.395138][ T9013] syz.4.1506[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.395293][ T9013] syz.4.1506[9013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.103473][ T29] audit: type=1400 audit(1725242281.305:6739): avc: denied { read } for pid=9021 comm="syz.4.1510" path="socket:[24623]" dev="sockfs" ino=24623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.175441][ T9019] syzkaller0: entered promiscuous mode [ 174.181038][ T9019] syzkaller0: entered allmulticast mode [ 174.828675][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.838294][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.859656][ T29] audit: type=1400 audit(1725242282.103:6740): avc: denied { bind } for pid=9032 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.104841][ T9041] ebtables: ebtables: counters copy to user failed while replacing table [ 175.114863][ T29] audit: type=1326 audit(1725242282.366:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfd69eb9 code=0x7ffc0000 [ 175.139583][ T29] audit: type=1326 audit(1725242282.366:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfd69eb9 code=0x7ffc0000 [ 175.163689][ T29] audit: type=1326 audit(1725242282.366:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f02bfd69eb9 code=0x7ffc0000 [ 175.587935][ T8934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.599043][ T8934] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.610145][ T8934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.621392][ T8934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.640818][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.662906][ T9067] syzkaller0: entered promiscuous mode [ 175.668417][ T9067] syzkaller0: entered allmulticast mode [ 176.679104][ T9094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.827269][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.294973][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 177.294987][ T29] audit: type=1400 audit(1725242284.665:6800): avc: denied { getopt } for pid=9096 comm="syz.0.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.363971][ T29] audit: type=1326 audit(1725242284.717:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.387645][ T29] audit: type=1326 audit(1725242284.717:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.411301][ T29] audit: type=1326 audit(1725242284.717:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.434838][ T29] audit: type=1326 audit(1725242284.717:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.458255][ T29] audit: type=1326 audit(1725242284.717:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.473103][ T9110] loop1: detected capacity change from 0 to 256 [ 177.481763][ T29] audit: type=1326 audit(1725242284.717:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.500276][ T9110] vfat: Bad value for 'fmask' [ 177.511389][ T29] audit: type=1326 audit(1725242284.717:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.511416][ T29] audit: type=1326 audit(1725242284.717:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.563276][ T29] audit: type=1326 audit(1725242284.717:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbd4f9eb9 code=0x7ffc0000 [ 177.647195][ T9115] loop1: detected capacity change from 0 to 1024 [ 177.676511][ T9119] __nla_validate_parse: 6 callbacks suppressed [ 177.676525][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 177.710711][ T9115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.733821][ T9110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1539'. [ 177.763517][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.909575][ T9134] loop1: detected capacity change from 0 to 512 [ 177.922045][ T9134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.936387][ T9134] EXT4-fs (loop1): 1 truncate cleaned up [ 177.942473][ T9134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.276996][ T9151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1550'. [ 178.286211][ T9151] bridge_slave_1: left allmulticast mode [ 178.291989][ T9151] bridge_slave_1: left promiscuous mode [ 178.297739][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.306520][ T9151] bridge_slave_0: left allmulticast mode [ 178.312297][ T9151] bridge_slave_0: left promiscuous mode [ 178.317974][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.383988][ T9157] sd 0:0:1:0: device reset [ 178.437530][ T9162] loop3: detected capacity change from 0 to 512 [ 178.445203][ T9162] EXT4-fs: test_dummy_encryption option not supported [ 178.674006][ T9168] loop3: detected capacity change from 0 to 1024 [ 178.685574][ T9168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.715578][ T9168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.050324][ T9183] sctp: [Deprecated]: syz.4.1561 (pid 9183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.050324][ T9183] Use struct sctp_sack_info instead [ 179.090300][ T9185] syzkaller0: entered promiscuous mode [ 179.095860][ T9185] syzkaller0: entered allmulticast mode [ 179.280710][ T5507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.374543][ T9198] can0: slcan on pts0. [ 179.431583][ T9198] can0 (unregistered): slcan off pts0. [ 179.873029][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.135784][ T9212] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 180.527057][ T9221] ================================================================== [ 180.535159][ T9221] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 180.542458][ T9221] [ 180.544819][ T9221] read to 0xffff88810b1106c0 of 4 bytes by task 9220 on cpu 1: [ 180.552359][ T9221] atime_needs_update+0x261/0x3e0 [ 180.557397][ T9221] touch_atime+0x4a/0x350 [ 180.561740][ T9221] shmem_file_splice_read+0x56a/0x5c0 [ 180.567198][ T9221] splice_direct_to_actor+0x26c/0x670 [ 180.572576][ T9221] do_splice_direct+0xd7/0x150 [ 180.577348][ T9221] do_sendfile+0x3ab/0x950 [ 180.581775][ T9221] __x64_sys_sendfile64+0x110/0x150 [ 180.586978][ T9221] x64_sys_call+0xed5/0x2d60 [ 180.591568][ T9221] do_syscall_64+0xc9/0x1c0 [ 180.596076][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.601977][ T9221] [ 180.604289][ T9221] write to 0xffff88810b1106c0 of 4 bytes by task 9221 on cpu 0: [ 180.611910][ T9221] touch_atime+0x1f3/0x350 [ 180.616342][ T9221] shmem_file_splice_read+0x56a/0x5c0 [ 180.621714][ T9221] splice_direct_to_actor+0x26c/0x670 [ 180.627096][ T9221] do_splice_direct+0xd7/0x150 [ 180.631875][ T9221] do_sendfile+0x3ab/0x950 [ 180.636287][ T9221] __x64_sys_sendfile64+0x110/0x150 [ 180.641496][ T9221] x64_sys_call+0xed5/0x2d60 [ 180.646093][ T9221] do_syscall_64+0xc9/0x1c0 [ 180.650605][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.656511][ T9221] [ 180.658911][ T9221] value changed: 0x02b7e420 -> 0x035813ee [ 180.664621][ T9221] [ 180.666933][ T9221] Reported by Kernel Concurrency Sanitizer on: [ 180.673087][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.4.1573 Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 180.683755][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 180.693802][ T9221] ================================================================== [ 180.763232][ T8008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.