last executing test programs: 1m4.789455371s ago: executing program 2 (id=254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) pipe2(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000100)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) 1m4.724620321s ago: executing program 2 (id=255): syz_open_dev$tty20(0xc, 0x4, 0x1) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) 1m4.724061751s ago: executing program 2 (id=256): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r4 = syz_open_pts(r3, 0x801) r5 = dup3(r4, r3, 0x0) write$char_usb(r5, &(0x7f00000000c0)="7151171e5b6dd2a7bfcdbfd2fdc2ee76133be46f84b9084b48401ec6ae3d5720a14a299922f3a7d675c85e92c353bb9f86998434c08b83bf04b7146418bcb8c76b", 0x41) 1m3.812551277s ago: executing program 2 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) timerfd_create(0x9, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000300)={0x0, 0x830, 0x5}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000700)={{r4}, {@val={r5}, @max}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1m3.748430907s ago: executing program 2 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0xa6, 0x0, 0x8, 0x0, 0x8, 0xc00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1320, 0xffffffff, 0x3, 0x2, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) lstat(0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) syz_clone3(&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000000b40)}, 0x58) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1m3.272637526s ago: executing program 2 (id=266): r0 = socket(0x1, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@noinit_itable}]}, 0x6, 0x640, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne471k4hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3QxoRF4vnLP/yW9bfelpr2PEDUE7PLhU78u1saXf/l409GuOfaDP+mTn8JZncqPd/ncd/jf39ZD7uSVvGYdmY5Vr7XznemvH3n1/5daf66+O/uSeNR1Z/Yyw4DM93IuZa4v9ZFmwx/sniT9ps/6zIjYv91fHtv/zzSqd1o46/9jTig7bHP7uj0izV5frkubX16upi/WfbOv7wxx/8rlP97eN/ZwCRtpdt/+kO8Tdt/7T1ddnf5H77X7nTmvH7a0/vdKp/puf2T/8xkdSPNyeKnB/tbG1tLEVMJFeLIkX+8tbWxvnu8dbLvKzlz0v1+D/8Uvv+v+f93xLVVONfZh/uf+/2i07r3ub933Qx+XWtzzZ0ksW/0nv77+v/Wd6v+qzjv99/8IVO67rFP3WYwAAAAAAAAKCE0vwabJIuvEmn6cJCfb7sZ2I6rd7b3Pry2r0Hd1ciPsw/DzmeRprkHxmZrS8na+vV1aXi87CN5fMty1+JiPci4jeVqXx54ea96sqogwcAAAAAAAAAAAAAAAAAAIBj4kwx/79xn+r/VOrz/4GS6H2DuX33fwBOiUHeYBI43vL+320X/+7w2gIMl/0/lJf+D+Wl/0N56f9QXvo/lJf+D+Wl/0N56f8AAAAAcCq998Vnf0siYvsbU/kjM1GsM+kXTrfxA5WuDKwdwPDp0VBeby79G+xD6fQ1/v9f8eWAg28OMAJJu8x8cFDr3vmftX3lrp3Dtw0AAAAAAAAAAAAAqPvg/c7z/w82Nxg4aUz7g/I6xPx/Xx0AJ5yv/ofycowP9JjFH5OdVvSa/w8AAAAAAAAAAAAAHJmZ/JGkC8Vc4JlI04WFiE9FxNkYT9bWq6uLEfFuRPy1Mv5Otrw06kYDAAAAAAAAAAAAAAAAAADAKbP58NHt5Wp1daM58f99Oac70bgLau/CtT7KdE18Mw74qkiG/2eZioiRb5SBJcaacpKI7WzLH4uGbWzG8WhGnhjxPyYAAAAAAAAAAAAAAAAAACihprnH7c39dsgtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDh273/f4/EynT9BX0V3psYdYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMn0SQAAAP//riA8Ng==") sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ptrace$getregs(0xe, 0x0, 0x15, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xb7400000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa71}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x4000) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0xffffffff, 0x5a60}) 48.286060834s ago: executing program 32 (id=266): r0 = socket(0x1, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@noinit_itable}]}, 0x6, 0x640, &(0x7f00000013c0)="$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") sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ptrace$getregs(0xe, 0x0, 0x15, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xb7400000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa71}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x4000) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0xffffffff, 0x5a60}) 3.750711222s ago: executing program 0 (id=902): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mknod$loop(0x0, 0x0, 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.669168449s ago: executing program 0 (id=923): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x3eae, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x181) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x14) dup3(r1, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r4, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 2.564389078s ago: executing program 5 (id=916): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0xfffffffffffffdab, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x1c, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r6}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2.253888477s ago: executing program 0 (id=920): mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) 2.156631317s ago: executing program 0 (id=921): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbmon(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000006) 2.002455896s ago: executing program 5 (id=925): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0xffffffffffffff3f) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/46, 0x2e}, {0x0}], 0x2, 0x10001, 0x7ff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 1.647695145s ago: executing program 3 (id=926): creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) iopl(0x3) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) acct(0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 1.647203195s ago: executing program 4 (id=927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000008"], 0xfe44, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x100, 0x17, 0x6, 0x3}, {0xfff9, 0xb4, 0x1, 0x80000001}, {0x1a, 0x5, 0x6b, 0x2}, {0x8, 0x3, 0xc, 0xfffff801}, {0x1, 0xe9, 0xfa, 0x4}, {0x6, 0x7f, 0x9, 0x3}, {0x4, 0x5, 0x6, 0xfffffff8}, {0x4, 0x9, 0x7}, {0x8, 0x8, 0x7f, 0xae64000}]}, 0x10) r5 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000440)="ac308868414ae53c291f57732942f8deb3aac842234212237f046bfefae3ef13d8cc92ea2895e9618623df6508abb50e4fa87af388b565d2c7401ff95608d8497877e73c97571b9165a45a7752fd601b81b0a2e5496823eab2f57191ebd5e4214cd3cf360d1ee2160be066a0f12a5017e183ae62ba79f7789378810484d22ccca9f196a8ab22f5ef25b95ed8aefa887bf7d9e2672d61095d054172431b448fa8ef56bb44b5aee9efe6e0748cd44a63051004a33e7dec3c62967a8cc5a8f8a2eab16b7603ad4c2333e067d9b0e7f7fad11240", 0xd2, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @auto=[0x62, 0x39, 0x33, 0x30, 0x63, 0x61, 0x30, 0x54, 0x62, 0x63, 0x33, 0x65, 0x66, 0x62, 0x30, 0x33]}, &(0x7f0000000300)={0x0, "c1d1a2047678902f6241862f8364ab329615ecf9c281101724fad14aaeabdac73c7701fec3543f64c2123e8b407fe06ef80d74ed44d5237e1a3c58870d83c976", 0x20}, 0x48, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x33be, 0xb85, 0x3, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setgroups(0x0, 0x0) 1.587717055s ago: executing program 3 (id=928): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x1, 0x265, 0x70a, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x5, 0x3, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800181100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4}, 0x10) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) write$char_usb(r2, &(0x7f0000000100)="e9f34686256d7c721831d80400a918103a875839f143f080da7a1a5ae6e7b790419e81269979d4b7f3cd9edb26b1c3c8efce1a9c4f98ed01aba31ad498cf6c323eebc04edfa61981f3288ac5e4f2d814fd12168ae7c9258edc7e2e312061c034bd63da3127f1a235682e0f3e291f05ff13b815d99e7959a26eed926323f28b3c7106dc7b82a61e3554473ce1ca2183ca5710", 0x92) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.540857285s ago: executing program 5 (id=929): socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.540474285s ago: executing program 3 (id=930): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rmdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0xf2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(r0, r2, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) 1.537786655s ago: executing program 4 (id=940): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000de080000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) ioctl$TCSETA(r2, 0x5406, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.451694484s ago: executing program 5 (id=931): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.451199745s ago: executing program 4 (id=932): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast1}]}}}]}, 0x3c}}, 0x8004) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.315137124s ago: executing program 1 (id=933): mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) 1.307249294s ago: executing program 0 (id=934): prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000000)={[{@grpjquota}, {@norecovery}, {@journal_path={'journal_path', 0x2c, './file1'}}, {@i_version}]}, 0x4, 0x5ca, &(0x7f0000001400)="$eJzs3b9vG1UcAPDv2U7SJEBChQRlQBEIWgmaNGmLyo+h3auq/NhYCE1albpt1ARBChKpVBiQEAtDJSYGyn8BFaxMSAwMLEyoUkGoCwgho3Nsx3HsxEnjXMl9PurJ9+6d/d41/vrevXvPDiDfChH7ImIuiRhp2lyqZ45V/8XdPz84ky5JVCqv/ZHEM7Vt9f2T2uNw7cn/jkT8+F0Se4tri5xfvHphulyevVJLTyxcnJuYX7x68PzF6XOz52YvTT0/dezokaPHJg/d66E1nLz+9rsjn5x646sv/kkmv/7lVBLH4/ezy3nNx7FdxmIs/qpUPmzdnv6/HtvuwjJSbLxPViStG7h/Jcsx0hcRj8ZIFJv+miPx0SuZ1g3oqUoSUQFyKhH/kFP1dkD92r676+BCj1slwE64cyKqV/9r479U7fOLGK32DQzdTVb187Tp0tuStIwfvj91PV2iR/1wQHtL1wZqa63xn1RjczT2VFNDdwur4j9tAZyuPabbX91i+WMtafEPO2fpWkQ81q79v3H8v9kU/29tsXzxDwAAAAAAANvn1omIeK7d/b9C7d7cnniyefzPTyszBI9vQ/kb3/8r3N6GYoA27pyIeHn1+N+kZZfRYu0+/4PLowGTs+fLs4ci4qGIOBB9A2l6cp0yDn6690anvObxf+mS1qE+FnBZ4XZpYPVzZqYXprd6vMCKO9ciHi91Hv8Tc6XqvP7W8b/p58Fcl2Xsffrm6U55G8c/0CuVLyP2t53/s9IMSNb/fo6Jantgot4qWOuJ9z/7plP54h+yk57/h9aP/9Gk+ft65jf3+v0RcXixVOmU3zH+G42N9u3//uT1Yv31U+9NLyxcmYzoT06u3T61uTrDblWPh3q8pPF/4Kn1+/8a7f+mOByMiKUuyxyM4V875Tn/Q3bS+J/Z1Pl/8ytTN0e/7VR+d/1/R6rn9AO1Lfr/YH3dBmjW9QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/6NCRDwQSWG8sV4ojI9HDEfEIzFUKF+eX3j27OV3Ls2kedXf/y/Uf+l3ZDmd1H//f7QpPdWSPhwRD0fE58XBanr8zOXyTNYHDwAAAAAAAAAAAAAAAAAAAPeJ4Q7z/1O/FbOuHdBzpdqjeIf8KWVdASAz4h/yS/xDfol/yC/xD/m1xfh3uwB2Aed/yKu+7nbb0+t6AFno9vw/2ON6AAAAAAAA2+LWSy/cSCJi6cXB6pLqr+U1bgzq94ddqZB1BYDMGMML+WXoL+RXl4N/gV0saaz9XWmX33n0f9KbCgEAAAAAAAAAAAAAa+zfd+vnDef/A7uS+f+QX6vm/w9kVw9g55n/D/nlGh/YaBa/+f8AAAAAAAAAAAAAkL35xasXpsvl2Ss5WanPd7xf6mNlnZW+iOi0T/0NfO9lHf64XVaSaYD0Zx+eO/9ZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPdfAAAA///brhp/") ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioperm(0x1, 0x3, 0x1000) lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) open$dir(&(0x7f00000001c0)='./file0\x00', 0x94080, 0x111) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) 1.244463454s ago: executing program 1 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) unshare(0x20040600) io_uring_setup(0x79b1, &(0x7f0000000240)={0x0, 0x631d, 0x2, 0x2, 0x800002d8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.065784143s ago: executing program 1 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001007f00000192000000000000000c001980080002"], 0x44}}, 0x0) 884.167893ms ago: executing program 1 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) 818.345602ms ago: executing program 0 (id=938): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mknod$loop(0x0, 0x0, 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 628.732592ms ago: executing program 3 (id=939): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_NAME(0xf, 0x0) r2 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0xccbd, 0x20, 0x1}, &(0x7f00000001c0), &(0x7f0000000040)) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x2e34, &(0x7f0000000180)) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 513.151101ms ago: executing program 1 (id=941): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0xffffffffffffff3f) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/46, 0x2e}, {0x0}], 0x2, 0x10001, 0x7ff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 512.482871ms ago: executing program 5 (id=942): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000008"], 0xfe44, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x100, 0x17, 0x6, 0x3}, {0xfff9, 0xb4, 0x1, 0x80000001}, {0x1a, 0x5, 0x6b, 0x2}, {0x8, 0x3, 0xc, 0xfffff801}, {0x1, 0xe9, 0xfa, 0x4}, {0x6, 0x7f, 0x9, 0x3}, {0x4, 0x5, 0x6, 0xfffffff8}, {0x4, 0x9, 0x7}, {0x8, 0x8, 0x7f, 0xae64000}]}, 0x10) r5 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000440)="ac308868414ae53c291f57732942f8deb3aac842234212237f046bfefae3ef13d8cc92ea2895e9618623df6508abb50e4fa87af388b565d2c7401ff95608d8497877e73c97571b9165a45a7752fd601b81b0a2e5496823eab2f57191ebd5e4214cd3cf360d1ee2160be066a0f12a5017e183ae62ba79f7789378810484d22ccca9f196a8ab22f5ef25b95ed8aefa887bf7d9e2672d61095d054172431b448fa8ef56bb44b5aee9efe6e0748cd44a63051004a33e7dec3c62967a8cc5a8f8a2eab16b7603ad4c2333e067d9b0e7f7fad11240", 0xd2, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @auto=[0x62, 0x39, 0x33, 0x30, 0x63, 0x61, 0x30, 0x54, 0x62, 0x63, 0x33, 0x65, 0x66, 0x62, 0x30, 0x33]}, &(0x7f0000000300)={0x0, "c1d1a2047678902f6241862f8364ab329615ecf9c281101724fad14aaeabdac73c7701fec3543f64c2123e8b407fe06ef80d74ed44d5237e1a3c58870d83c976", 0x20}, 0x48, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x33be, 0xb85, 0x3, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setgroups(0x0, 0x0) 512.073941ms ago: executing program 4 (id=943): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 502.988441ms ago: executing program 3 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27961738", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 228.04983ms ago: executing program 5 (id=945): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 225.84329ms ago: executing program 4 (id=955): creat(0x0, 0xc2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0xd3d0, 0x0, 0x0, 0x0, 0x834}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000cc0)={0x1, 0x0, 0x6, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x41, &(0x7f0000000300)={[{@bsdgroups}, {@nodiscard}, {@noinit_itable}, {@grpjquota}, {@grpjquota}, {@orlov}, {@discard}, {@grpid}, {@barrier}]}, 0x64, 0x510, &(0x7f0000000f80)="$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") 172.71648ms ago: executing program 3 (id=956): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 1.07194ms ago: executing program 1 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(r0) 0s ago: executing program 4 (id=958): timer_create(0x2, &(0x7f000049efa0)={0x0, 0x1007, 0x4}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffd, @remote, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x2000410, &(0x7f0000000280), 0x81, 0x7a5, &(0x7f0000000f80)="$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") lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000a40)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.0.110'. [ 41.680696][ T3767] bridge_slave_1: left allmulticast mode [ 41.686365][ T3767] bridge_slave_1: left promiscuous mode [ 41.692216][ T3767] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.700507][ T3767] bridge_slave_0: left allmulticast mode [ 41.706252][ T3767] bridge_slave_0: left promiscuous mode [ 41.712010][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.827892][ T3772] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.950946][ T3789] loop0: detected capacity change from 0 to 512 [ 42.982098][ T3789] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8 [ 43.060584][ T3795] loop3: detected capacity change from 0 to 512 [ 43.093707][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 43.108106][ T3795] EXT4-fs (loop3): failed to initialize system zone (-117) [ 43.123155][ T3795] EXT4-fs (loop3): mount failed [ 43.153643][ T3803] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.164550][ T3797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 43.242522][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.249856][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.322926][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.348432][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.397611][ T3797] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.406533][ T3797] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.415540][ T3797] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.424528][ T3797] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.474076][ T3814] : renamed from bond0 (while UP) [ 43.510605][ T3816] loop2: detected capacity change from 0 to 164 [ 43.536550][ T3818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 43.787969][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 43.787985][ T29] audit: type=1400 audit(1739153865.489:577): avc: denied { read write } for pid=3829 comm="syz.0.134" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.817678][ T29] audit: type=1400 audit(1739153865.489:578): avc: denied { open } for pid=3829 comm="syz.0.134" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.852211][ T3832] loop0: detected capacity change from 0 to 1024 [ 43.868538][ T3832] EXT4-fs (loop0): stripe (42) is not aligned with cluster size (16), stripe is disabled [ 43.891754][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 43.900753][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 43.909488][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.931020][ T3832] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.134: corrupted in-inode xattr: overlapping e_value [ 43.945802][ T3843] loop1: detected capacity change from 0 to 256 [ 43.947769][ T3832] EXT4-fs (loop0): Remounting filesystem read-only [ 43.975634][ T29] audit: type=1400 audit(1739153865.659:579): avc: denied { create } for pid=3845 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.995373][ T29] audit: type=1326 audit(1739153865.659:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.018646][ T29] audit: type=1326 audit(1739153865.659:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.041918][ T29] audit: type=1326 audit(1739153865.659:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.048467][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.065346][ T29] audit: type=1326 audit(1739153865.659:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.071037][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.095487][ T29] audit: type=1326 audit(1739153865.799:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.099999][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.126740][ T29] audit: type=1326 audit(1739153865.819:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.128966][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.128986][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.152166][ T29] audit: type=1326 audit(1739153865.819:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 44.157908][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.192544][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.198349][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.204238][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.210020][ T3849] blackhole_netdev_xmit(): Dropping skb. [ 44.231414][ T3852] Zero length message leads to an empty skb [ 44.379621][ T3863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.422497][ T3863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.511236][ T3863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.532302][ T3872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 44.551285][ T3863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.619339][ T3863] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.631465][ T3863] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.645032][ T3863] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.656998][ T3863] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.667685][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.750636][ T3882] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 44.772572][ T3882] loop2: detected capacity change from 0 to 512 [ 44.818806][ T3884] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.152'. [ 44.868535][ T3882] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.939330][ T3882] EXT4-fs (loop2): mount failed [ 44.965236][ T3893] rdma_op ffff88812bac6980 conn xmit_rdma 0000000000000000 [ 45.362181][ T3904] loop2: detected capacity change from 0 to 512 [ 45.371558][ T3904] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.392671][ T3904] EXT4-fs (loop2): 1 truncate cleaned up [ 45.400123][ T3904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.413231][ T3904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.448256][ T3913] loop2: detected capacity change from 0 to 256 [ 45.462622][ T3913] FAT-fs (loop2): Directory bread(block 64) failed [ 45.469599][ T3913] FAT-fs (loop2): Directory bread(block 65) failed [ 45.476184][ T3913] FAT-fs (loop2): Directory bread(block 66) failed [ 45.486741][ T3913] FAT-fs (loop2): Directory bread(block 67) failed [ 45.507953][ T3917] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.521447][ T3917] bridge0: entered allmulticast mode [ 45.521646][ T3913] FAT-fs (loop2): Directory bread(block 68) failed [ 45.535132][ T3917] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.561699][ T3913] FAT-fs (loop2): Directory bread(block 69) failed [ 45.561723][ T3917] bridge_slave_0: left allmulticast mode [ 45.561747][ T3917] bridge_slave_0: left promiscuous mode [ 45.561956][ T3917] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.568487][ T3913] FAT-fs (loop2): Directory bread(block 70) failed [ 45.594738][ T3913] FAT-fs (loop2): Directory bread(block 71) failed [ 45.601876][ T3913] FAT-fs (loop2): Directory bread(block 72) failed [ 45.610606][ T3913] FAT-fs (loop2): Directory bread(block 73) failed [ 45.669248][ T3913] syz.2.163: attempt to access beyond end of device [ 45.669248][ T3913] loop2: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 45.700313][ T3913] syz.2.163: attempt to access beyond end of device [ 45.700313][ T3913] loop2: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 45.842855][ T3935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.900908][ T3944] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 45.912660][ T3935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.951403][ T3935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.965348][ T3948] __nla_validate_parse: 4 callbacks suppressed [ 45.965368][ T3948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'. [ 45.989770][ T3948] vlan2: entered promiscuous mode [ 45.994898][ T3948] ip6_vti1: entered promiscuous mode [ 46.024324][ T3935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.046218][ T3952] netlink: 128 bytes leftover after parsing attributes in process `syz.2.178'. [ 46.114609][ T3935] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.127807][ T3935] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.141059][ T3935] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.150053][ T3947] xt_hashlimit: max too large, truncated to 1048576 [ 46.153461][ T3935] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.173714][ T3952] Falling back ldisc for ttyS3. [ 46.244141][ T3959] pim6reg: entered allmulticast mode [ 46.252302][ T3959] pim6reg: left allmulticast mode [ 46.989334][ T3985] mmap: syz.4.190 (3985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.002272][ T3986] sch_tbf: peakrate 12500000 is lower than or equals to rate 3221225472 ! [ 47.096351][ T3992] loop3: detected capacity change from 0 to 512 [ 47.105462][ T3992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.131118][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.144010][ T3992] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.170306][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.256132][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 47.281753][ T4001] loop1: detected capacity change from 0 to 512 [ 47.303342][ T4004] loop0: detected capacity change from 0 to 512 [ 47.310135][ T4001] EXT4-fs: Ignoring removed oldalloc option [ 47.335617][ T4001] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.196: Parent and EA inode have the same ino 15 [ 47.359620][ T4001] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.377194][ T4001] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.196: Parent and EA inode have the same ino 15 [ 47.390043][ T4010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.390953][ T4001] EXT4-fs (loop1): 1 orphan inode deleted [ 47.401530][ T4004] EXT4-fs (loop0): 1 orphan inode deleted [ 47.413840][ T4001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.428688][ T4004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.441976][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 47.464647][ T4014] SELinux: Context Ü is not valid (left unmapped). [ 47.468894][ T4004] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.471938][ T4014] SELinux: Context éóF†%m|r1Ø is not valid (left unmapped). [ 47.485742][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.502688][ T4004] Process accounting resumed [ 47.520954][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 47.524951][ T4016] loop2: detected capacity change from 0 to 512 [ 47.548935][ T4004] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 47.558400][ T4016] EXT4-fs: Ignoring removed i_version option [ 47.590307][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.602007][ T4016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.615131][ T4016] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.738858][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.810414][ T4036] rdma_op ffff88811fc5b180 conn xmit_rdma 0000000000000000 [ 47.874984][ T4043] loop0: detected capacity change from 0 to 512 [ 47.891341][ T4043] EXT4-fs: Ignoring removed orlov option [ 47.936359][ T4043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.951184][ T4043] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 47.959295][ T4043] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.966076][ T4043] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.211: bg 0: block 248: padding at end of block bitmap is not set [ 47.990460][ T4043] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.211: Failed to acquire dquot type 1 [ 48.006086][ T4048] loop3: detected capacity change from 0 to 512 [ 48.007014][ T4043] EXT4-fs (loop0): 1 truncate cleaned up [ 48.018819][ T4048] EXT4-fs: Ignoring removed i_version option [ 48.024973][ T4048] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.026649][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.032242][ T4048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.055575][ T4048] EXT4-fs (loop3): 1 truncate cleaned up [ 48.061867][ T4048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.098548][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.130741][ T4056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.217'. [ 48.141778][ T4059] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 48.153352][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.221338][ T4073] loop0: detected capacity change from 0 to 512 [ 48.229069][ T4073] EXT4-fs: Ignoring removed i_version option [ 48.235133][ T4073] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.235335][ T4068] loop3: detected capacity change from 0 to 2048 [ 48.251078][ T4073] EXT4-fs: dax option not supported [ 48.276870][ T4073] loop0: detected capacity change from 0 to 256 [ 48.285484][ T4068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.634134][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.807025][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 48.807044][ T29] audit: type=1326 audit(1739153870.499:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe99e983da7 code=0x7ffc0000 [ 48.836608][ T29] audit: type=1326 audit(1739153870.499:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe99e928fb9 code=0x7ffc0000 [ 48.860029][ T29] audit: type=1326 audit(1739153870.499:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 48.885429][ T29] audit: type=1326 audit(1739153870.499:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe99e983da7 code=0x7ffc0000 [ 48.908748][ T29] audit: type=1326 audit(1739153870.499:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe99e928fb9 code=0x7ffc0000 [ 48.932099][ T29] audit: type=1326 audit(1739153870.499:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 48.955454][ T29] audit: type=1326 audit(1739153870.539:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe99e983da7 code=0x7ffc0000 [ 48.979394][ T29] audit: type=1326 audit(1739153870.539:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe99e928fb9 code=0x7ffc0000 [ 48.998802][ T4083] netlink: 76 bytes leftover after parsing attributes in process `syz.3.224'. [ 49.002984][ T29] audit: type=1326 audit(1739153870.539:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 49.034950][ T29] audit: type=1326 audit(1739153870.559:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe99e983da7 code=0x7ffc0000 [ 49.171899][ T4092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.221516][ T4092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.311899][ T4092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.340449][ T4092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.397566][ T4092] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.410442][ T4092] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.426506][ T4092] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.438956][ T4092] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.494634][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 49.555895][ T4114] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 50.183768][ T4126] infiniband syz!: set active [ 50.188599][ T4126] infiniband syz!: added team_slave_0 [ 50.201313][ T4126] RDS/IB: syz!: added [ 50.205453][ T4126] smc: adding ib device syz! with port count 1 [ 50.211975][ T4126] smc: ib device syz! port 1 has pnetid [ 50.364870][ T4130] loop3: detected capacity change from 0 to 128 [ 50.388679][ T4130] syz.3.243: attempt to access beyond end of device [ 50.388679][ T4130] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.409032][ T4130] syz.3.243: attempt to access beyond end of device [ 50.409032][ T4130] loop3: rw=524288, sector=145, nr_sectors = 544 limit=128 [ 50.423484][ T4130] syz.3.243: attempt to access beyond end of device [ 50.423484][ T4130] loop3: rw=524288, sector=697, nr_sectors = 344 limit=128 [ 50.446111][ T2227] kworker/u8:10: attempt to access beyond end of device [ 50.446111][ T2227] loop3: rw=1, sector=689, nr_sectors = 8 limit=128 [ 50.509437][ T4132] syzkaller0: entered promiscuous mode [ 50.514923][ T4132] syzkaller0: entered allmulticast mode [ 51.029540][ T4143] net_ratelimit: 595 callbacks suppressed [ 51.029557][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.041164][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.046826][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.052524][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.058211][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.063902][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.069585][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.075309][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.081035][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.086696][ T4143] blackhole_netdev_xmit(): Dropping skb. [ 51.676938][ T4160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 52.227957][ T4170] loop4: detected capacity change from 0 to 1024 [ 52.236793][ T4170] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.257: Failed to acquire dquot type 0 [ 52.248912][ T4170] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 52.263751][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.257: corrupted inode contents [ 52.276064][ T4170] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #13: comm syz.4.257: mark_inode_dirty error [ 52.287673][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.257: corrupted inode contents [ 52.299823][ T4170] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.257: mark_inode_dirty error [ 52.311539][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.257: corrupted inode contents [ 52.325093][ T4170] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 52.334035][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.257: corrupted inode contents [ 52.346175][ T4170] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.257: mark_inode_dirty error [ 52.357767][ T4170] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 52.367097][ T4170] EXT4-fs (loop4): 1 truncate cleaned up [ 52.373197][ T4170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.507174][ T4180] netlink: 3 bytes leftover after parsing attributes in process `syz.0.259'. [ 52.516987][ T4180] 0ªX¹¦À: renamed from caif0 [ 52.523917][ T4180] 0ªX¹¦À: entered allmulticast mode [ 52.711414][ T4190] syz.2.263 uses obsolete (PF_INET,SOCK_PACKET) [ 52.855748][ T4194] loop2: detected capacity change from 0 to 512 [ 52.944800][ T4194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.131243][ T4194] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.147031][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.182622][ T4198] loop4: detected capacity change from 0 to 256 [ 53.189655][ T4198] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.203936][ T4198] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.220393][ T4194] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 53.244169][ T3303] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /45/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 53.352748][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4201 comm=syz.4.267 [ 53.367034][ T4201] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 53.516742][ T4209] loop3: detected capacity change from 0 to 1024 [ 53.579162][ T4209] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.270: Failed to acquire dquot type 0 [ 53.597776][ T4209] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.608227][ T4214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 53.617341][ T4209] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.270: corrupted inode contents [ 53.635955][ T4209] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #13: comm syz.3.270: mark_inode_dirty error [ 53.655263][ T4209] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.270: corrupted inode contents [ 53.679101][ T4209] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.270: mark_inode_dirty error [ 53.699930][ T4218] loop0: detected capacity change from 0 to 128 [ 53.714603][ T4218] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.735333][ T4209] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.270: corrupted inode contents [ 53.761308][ T4218] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.778270][ T4209] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 53.804536][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.827045][ T4209] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.270: corrupted inode contents [ 53.845245][ T4222] loop0: detected capacity change from 0 to 512 [ 53.853179][ T4219] cgroup2: Unknown parameter 'cpuacct' [ 53.887727][ T4209] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.270: mark_inode_dirty error [ 53.908764][ T4209] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 53.923194][ T4222] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 53.931189][ T4222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 53.941760][ T4209] EXT4-fs (loop3): 1 truncate cleaned up [ 53.947654][ T4222] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.957516][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 53.967861][ T4222] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 53.981008][ T4225] vlan1: entered promiscuous mode [ 53.986822][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.001490][ T4222] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 54.012319][ T4222] EXT4-fs (loop0): 1 truncate cleaned up [ 54.020968][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 54.020972][ T4209] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.270: Failed to acquire dquot type 0 [ 54.020985][ T29] audit: type=1400 audit(1739153875.719:1921): avc: denied { remove_name } for pid=4208 comm="syz.3.270" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.027181][ T29] audit: type=1400 audit(1739153875.719:1922): avc: denied { rename } for pid=4208 comm="syz.3.270" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.045078][ T4222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.267120][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.406349][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.560979][ T4237] bridge0: entered promiscuous mode [ 54.600434][ T4237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 54.668291][ T4237] bridge_slave_1: left allmulticast mode [ 54.674037][ T4237] bridge_slave_1: left promiscuous mode [ 54.679808][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.721003][ T4240] loop0: detected capacity change from 0 to 1024 [ 54.731238][ T4240] EXT4-fs: Ignoring removed orlov option [ 54.737125][ T4237] bridge_slave_0: left allmulticast mode [ 54.742891][ T4237] bridge_slave_0: left promiscuous mode [ 54.748610][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.757937][ T4237] bridge0 (unregistering): left promiscuous mode [ 54.765946][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.786087][ T29] audit: type=1400 audit(1739153876.479:1923): avc: denied { write } for pid=4239 comm="syz.0.279" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.154671][ T4255] loop3: detected capacity change from 0 to 128 [ 55.166717][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 55.763418][ T4263] loop3: detected capacity change from 0 to 2048 [ 55.790664][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.815055][ T29] audit: type=1400 audit(1739153877.509:1924): avc: denied { connect } for pid=4262 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.871905][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.958349][ T29] audit: type=1400 audit(1739153877.639:1925): avc: denied { mounton } for pid=4267 comm="syz.1.289" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 55.999464][ T4270] loop1: detected capacity change from 0 to 1024 [ 56.019422][ T4270] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.025990][ T4270] EXT4-fs: Ignoring removed orlov option [ 56.031761][ T4270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.049774][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.079126][ T4270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.101083][ T4276] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 56.156864][ T29] audit: type=1400 audit(1739153877.849:1926): avc: denied { append } for pid=4277 comm="syz.3.291" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.254170][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.271341][ T29] audit: type=1326 audit(1739153877.889:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 56.294814][ T29] audit: type=1326 audit(1739153877.889:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 56.318229][ T29] audit: type=1326 audit(1739153877.889:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 56.341711][ T29] audit: type=1326 audit(1739153877.899:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 56.445520][ T4290] bond0: (slave bond_slave_0): Releasing backup interface [ 56.459008][ T4290] bond0: (slave bond_slave_1): Releasing backup interface [ 56.473388][ T4290] team0: Port device team_slave_0 removed [ 56.484465][ T4290] team0: Port device team_slave_1 removed [ 56.492575][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.500198][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.518718][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.526191][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.674196][ T4298] loop1: detected capacity change from 0 to 8192 [ 56.697903][ T4298] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.731472][ T4300] netlink: 76 bytes leftover after parsing attributes in process `syz.4.302'. [ 56.793284][ T4306] loop1: detected capacity change from 0 to 512 [ 56.806118][ T4308] siw: device registration error -23 [ 56.829238][ T4306] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.837495][ T4306] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.844285][ T4306] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.951953][ T4306] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 56.959085][ T4306] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.304: bg 0: block 40: padding at end of block bitmap is not set [ 56.974099][ T4306] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.983293][ T4306] EXT4-fs (loop1): 1 truncate cleaned up [ 57.088202][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.120466][ T4315] loop0: detected capacity change from 0 to 2048 [ 57.143853][ T4306] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.304: corrupted xattr block 31: invalid header [ 57.201545][ T4306] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 57.225850][ T4315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.353128][ T4322] loop3: detected capacity change from 0 to 2048 [ 57.416130][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.458754][ T4322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.503767][ T4322] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.826509][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.834609][ T40] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 57.853329][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 192 with error 117 [ 57.866036][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.866036][ T40] [ 57.910975][ T4339] loop0: detected capacity change from 0 to 256 [ 57.918711][ T4338] veth0_vlan: entered allmulticast mode [ 58.574265][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.689183][ T4354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 58.733537][ T4356] bond1: entered promiscuous mode [ 58.738647][ T4356] bond1: entered allmulticast mode [ 58.744047][ T4356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.761225][ T4356] bond1 (unregistering): Released all slaves [ 58.823876][ T4363] 9pnet_fd: Insufficient options for proto=fd [ 58.843031][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.850670][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.858215][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.865689][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.873211][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.880643][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.888085][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.895495][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.902954][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.910480][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.918063][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.925756][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.933200][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.940664][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.948121][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.955529][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.963008][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.970448][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.977892][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.985292][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.992830][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.000280][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.007711][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.015264][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.022913][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.030337][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.037755][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.045144][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.052613][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.060196][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.067643][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.075056][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.082510][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.089996][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.097396][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.104770][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.112190][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.119647][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.127039][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.134493][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.141919][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.149325][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.156717][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.167827][ T3371] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.231697][ T4378] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.320'. [ 59.241336][ T4374] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.320'. [ 59.343092][ T4382] loop3: detected capacity change from 0 to 512 [ 59.351156][ T4382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.413234][ T4382] EXT4-fs (loop3): 1 truncate cleaned up [ 59.423188][ T4382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.458819][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 59.458891][ T29] audit: type=1400 audit(1739153881.159:2046): avc: denied { remove_name } for pid=4381 comm="gtp" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.487128][ T29] audit: type=1400 audit(1739153881.159:2047): avc: denied { unlink } for pid=4381 comm="gtp" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.512484][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.521894][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.554558][ T4386] bond0: (slave bond_slave_0): Releasing backup interface [ 59.571052][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.581675][ T4386] bond0: (slave bond_slave_1): Releasing backup interface [ 59.591419][ T4386] team0: Port device team_slave_0 removed [ 59.598509][ T29] audit: type=1400 audit(1739153881.209:2048): avc: denied { read write } for pid=4375 comm="syz.1.324" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.622005][ T29] audit: type=1400 audit(1739153881.209:2049): avc: denied { open } for pid=4375 comm="syz.1.324" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.623343][ T4386] team0: Port device team_slave_1 removed [ 59.645319][ T29] audit: type=1400 audit(1739153881.209:2050): avc: denied { ioctl } for pid=4375 comm="syz.1.324" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.710204][ T29] audit: type=1400 audit(1739153881.399:2051): avc: denied { ioctl } for pid=4385 comm="syz.4.327" path="socket:[7455]" dev="sockfs" ino=7455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.736624][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.768005][ T4392] loop0: detected capacity change from 0 to 2048 [ 59.775438][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.795240][ T4394] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 59.806741][ T4390] team0: Mode changed to "loadbalance" [ 59.819312][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'. [ 59.899248][ T4392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.017112][ T4401] loop3: detected capacity change from 0 to 1024 [ 60.042973][ T4401] journal_path: Non-blockdev passed as './file1' [ 60.049431][ T4401] EXT4-fs: error: could not find journal device path [ 60.078729][ T29] audit: type=1400 audit(1739153881.779:2052): avc: denied { write } for pid=4400 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.100365][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 60.249307][ T29] audit: type=1400 audit(1739153881.949:2053): avc: denied { create } for pid=4403 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.277292][ T29] audit: type=1326 audit(1739153881.969:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 60.300788][ T29] audit: type=1326 audit(1739153881.969:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 60.324338][ T4397] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.345026][ T4407] loop3: detected capacity change from 0 to 128 [ 60.357992][ T4407] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.397338][ T4407] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.534850][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.638269][ T4413] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 61.378918][ T4422] loop3: detected capacity change from 0 to 1024 [ 61.418959][ T4422] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 61.431927][ T4422] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.443482][ T4422] EXT4-fs (loop3): invalid journal inode [ 61.450779][ T4422] EXT4-fs (loop3): can't get journal size [ 61.456811][ T4422] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.338: blocks 48-48 from inode overlap system zone [ 61.472506][ T4422] EXT4-fs (loop3): failed to initialize system zone (-117) [ 61.480183][ T4422] EXT4-fs (loop3): mount failed [ 61.710242][ T4432] loop0: detected capacity change from 0 to 512 [ 62.095800][ T4432] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.340: bg 0: block 248: padding at end of block bitmap is not set [ 62.117841][ T4432] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.340: Failed to acquire dquot type 1 [ 62.148073][ T4432] EXT4-fs (loop0): 1 truncate cleaned up [ 62.154167][ T4432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.187427][ T4432] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.284520][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.377403][ T4450] loop0: detected capacity change from 0 to 1024 [ 62.436095][ T4450] EXT4-fs: Ignoring removed orlov option [ 62.441873][ T4450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.531491][ T4445] loop1: detected capacity change from 0 to 8192 [ 62.727554][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.177116][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.515443][ T4472] loop0: detected capacity change from 0 to 512 [ 63.553679][ T4472] ext3: Unknown parameter 'fowner>18446744073709551615' [ 64.151515][ T4487] loop1: detected capacity change from 0 to 1024 [ 64.248260][ T4487] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 64.248260][ T4487] [ 64.259103][ T4487] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 64.390817][ T4489] syzkaller0: entered promiscuous mode [ 64.396364][ T4489] syzkaller0: entered allmulticast mode [ 64.536019][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 64.536066][ T29] audit: type=1400 audit(1739153886.229:2456): avc: denied { cpu } for pid=4490 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.577403][ T29] audit: type=1400 audit(1739153886.259:2457): avc: denied { name_bind } for pid=4490 comm="syz.1.358" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.599068][ T29] audit: type=1400 audit(1739153886.259:2458): avc: denied { node_bind } for pid=4490 comm="syz.1.358" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.682353][ T29] audit: type=1400 audit(1739153886.379:2459): avc: denied { create } for pid=4494 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.728402][ T29] audit: type=1400 audit(1739153886.379:2460): avc: denied { write } for pid=4494 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.748769][ T29] audit: type=1400 audit(1739153886.379:2461): avc: denied { read } for pid=4494 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.795836][ T29] audit: type=1400 audit(1739153886.479:2462): avc: denied { create } for pid=4496 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 64.816136][ T29] audit: type=1400 audit(1739153886.479:2463): avc: denied { bind } for pid=4496 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 64.838158][ T29] audit: type=1400 audit(1739153886.489:2464): avc: denied { execmem } for pid=4498 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 64.944136][ T29] audit: type=1400 audit(1739153886.639:2465): avc: denied { create } for pid=4501 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.861271][ T4514] loop1: detected capacity change from 0 to 512 [ 65.906936][ T4514] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.367: corrupted in-inode xattr: invalid ea_ino [ 65.935690][ T4514] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.367: couldn't read orphan inode 15 (err -117) [ 65.991081][ T4514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.099908][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.238669][ T4539] sg_write: data in/out 808464396/120 bytes for SCSI command 0x0-- guessing data in; [ 66.238669][ T4539] program syz.3.374 not setting count and/or reply_len properly [ 66.295980][ T4539] loop3: detected capacity change from 0 to 2048 [ 66.339305][ T4539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.434425][ T4548] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 66.454418][ T4548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 68.474713][ T3303] EXT4-fs unmount: 1 callbacks suppressed [ 68.474738][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.706390][ T4624] usb usb1: usbfs: process 4624 (syz.0.406) did not claim interface 0 before use [ 68.731381][ T40] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.752477][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 68.794219][ T4625] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.828638][ T40] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.909281][ T40] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.998953][ T40] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.225909][ T40] bridge_slave_1: left allmulticast mode [ 69.231655][ T40] bridge_slave_1: left promiscuous mode [ 69.237424][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.257563][ T40] bridge_slave_0: left allmulticast mode [ 69.263355][ T40] bridge_slave_0: left promiscuous mode [ 69.269089][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.324416][ T40] ip6_vti1 (unregistering): left promiscuous mode [ 69.400811][ T40]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.410391][ T40]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.420975][ T40]  (unregistering): Released all slaves [ 69.427573][ T4655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 69.468723][ T40] tipc: Left network mode [ 69.512683][ T40] hsr_slave_0: left promiscuous mode [ 69.519645][ T40] hsr_slave_1: left promiscuous mode [ 69.530855][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.538433][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.556004][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.563553][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.583781][ T40] veth1_macvtap: left promiscuous mode [ 69.589488][ T40] veth0_macvtap: left promiscuous mode [ 69.595473][ T40] veth1_vlan: left promiscuous mode [ 69.601315][ T40] veth0_vlan: left promiscuous mode [ 69.669020][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 69.669035][ T29] audit: type=1400 audit(1739153891.369:2978): avc: denied { bind } for pid=4662 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.695130][ T40] team0 (unregistering): Port device team_slave_1 removed [ 69.705016][ T40] team0 (unregistering): Port device team_slave_0 removed [ 69.746248][ T4613] chnl_net:caif_netlink_parms(): no params data found [ 69.793353][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.800502][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.807993][ T4613] bridge_slave_0: entered allmulticast mode [ 69.814556][ T4613] bridge_slave_0: entered promiscuous mode [ 69.821439][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.828536][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.835903][ T4613] bridge_slave_1: entered allmulticast mode [ 69.842331][ T4613] bridge_slave_1: entered promiscuous mode [ 69.898659][ T4613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.909528][ T4613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.931494][ T4613] team0: Port device team_slave_0 added [ 69.938360][ T4613] team0: Port device team_slave_1 added [ 69.955121][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.962199][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.988147][ T4613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.999823][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.006808][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.032890][ T4613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.103184][ T4613] hsr_slave_0: entered promiscuous mode [ 70.127889][ T4613] hsr_slave_1: entered promiscuous mode [ 70.133805][ T4613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.141637][ T4613] Cannot create hsr debugfs directory [ 70.166593][ T29] audit: type=1400 audit(1739153891.859:2979): avc: denied { getopt } for pid=4672 comm="syz.3.419" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.240769][ T4613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.253680][ T4613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.264226][ T4613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.274493][ T4613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.314681][ T4613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.336976][ T4613] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.358211][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.365435][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.391244][ T4613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.401676][ T4613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.422505][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.429625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.475938][ T4613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.491729][ T29] audit: type=1400 audit(1739153892.189:2980): avc: denied { map } for pid=4677 comm="syz.3.420" path="socket:[8818]" dev="sockfs" ino=8818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 70.589124][ T29] audit: type=1400 audit(1739153892.289:2981): avc: denied { create } for pid=4699 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.635133][ T4705] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 70.640972][ T4613] veth0_vlan: entered promiscuous mode [ 70.644880][ T29] audit: type=1400 audit(1739153892.339:2982): avc: denied { write } for pid=4707 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.651429][ T4613] veth1_vlan: entered promiscuous mode [ 70.713748][ T4613] veth0_macvtap: entered promiscuous mode [ 70.721670][ T4613] veth1_macvtap: entered promiscuous mode [ 70.732710][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.743285][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.753267][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.763730][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.777776][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.785137][ T4713] IPv6: Can't replace route, no match found [ 70.795835][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.806410][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.816338][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.826870][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.839948][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.851095][ T4613] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.859992][ T4613] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.868785][ T4613] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.877590][ T4613] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.902115][ T29] audit: type=1400 audit(1739153892.599:2983): avc: denied { mounton } for pid=4613 comm="syz-executor" path="/root/syzkaller.5OW0xE/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.928843][ T29] audit: type=1400 audit(1739153892.599:2984): avc: denied { mount } for pid=4613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.951211][ T29] audit: type=1400 audit(1739153892.599:2985): avc: denied { mount } for pid=4613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.973209][ T29] audit: type=1400 audit(1739153892.599:2986): avc: denied { mounton } for pid=4613 comm="syz-executor" path="/root/syzkaller.5OW0xE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.000010][ T29] audit: type=1400 audit(1739153892.599:2987): avc: denied { mounton } for pid=4613 comm="syz-executor" path="/root/syzkaller.5OW0xE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.092483][ T4724] loop5: detected capacity change from 0 to 8192 [ 71.108090][ T4724] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 71.116650][ T4724] FAT-fs (loop5): Filesystem has been set read-only [ 71.124640][ T4724] tipc: Started in network mode [ 71.129633][ T4724] tipc: Node identity ac14140f, cluster identity 4711 [ 71.136509][ T4724] tipc: New replicast peer: 255.255.255.39 [ 71.142569][ T4724] tipc: Enabled bearer , priority 10 [ 72.094798][ T4761] 9pnet_fd: Insufficient options for proto=fd [ 72.158507][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.258163][ T3371] tipc: Node number set to 2886997007 [ 72.320855][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.339798][ T4761] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 72.359223][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.367496][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.391283][ T4763] serio: Serial port ttyS3 [ 73.516249][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 73.663819][ T4805] loop5: detected capacity change from 0 to 256 [ 73.678654][ T4805] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 73.689884][ T4804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 73.844290][ T4813] bridge_slave_0: left allmulticast mode [ 73.850072][ T4813] bridge_slave_0: left promiscuous mode [ 73.855919][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.908288][ T4813] bridge_slave_1: left allmulticast mode [ 73.913984][ T4813] bridge_slave_1: left promiscuous mode [ 73.919720][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.024913][ T4813] bond0: (slave bond_slave_0): Releasing backup interface [ 74.048526][ T4818] loop5: detected capacity change from 0 to 512 [ 74.056412][ T4813] bond0: (slave bond_slave_1): Releasing backup interface [ 74.083467][ T4813] team0: Port device team_slave_0 removed [ 74.093592][ T4813] team0: Port device team_slave_1 removed [ 74.102270][ T4818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.115159][ T4818] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.129520][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.137175][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.147398][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.154826][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.170476][ T4814] team0: Mode changed to "loadbalance" [ 74.225729][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.020420][ T4850] hub 2-0:1.0: USB hub found [ 75.025187][ T4850] hub 2-0:1.0: 8 ports detected [ 75.038971][ T4850] IPv6: Can't replace route, no match found [ 75.129894][ T4855] tipc: Enabled bearer , priority 0 [ 75.146732][ T4851] tipc: Resetting bearer [ 75.526752][ T4851] tipc: Disabling bearer [ 75.647969][ T4862] geneve2: entered allmulticast mode [ 76.304308][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 76.304324][ T29] audit: type=1326 audit(1739153897.999:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.334038][ T29] audit: type=1326 audit(1739153897.999:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.357386][ T29] audit: type=1326 audit(1739153897.999:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.380682][ T29] audit: type=1326 audit(1739153897.999:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.404077][ T29] audit: type=1326 audit(1739153897.999:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.632659][ T29] audit: type=1326 audit(1739153898.129:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.656145][ T29] audit: type=1326 audit(1739153898.129:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.679576][ T29] audit: type=1326 audit(1739153898.129:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.702945][ T29] audit: type=1326 audit(1739153898.129:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.726355][ T29] audit: type=1326 audit(1739153898.129:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99e98cde9 code=0x7ffc0000 [ 76.804065][ T4878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4878 comm=syz.1.479 [ 76.828743][ T4878] batadv1: entered allmulticast mode [ 77.222266][ T4892] tipc: Started in network mode [ 77.227345][ T4892] tipc: Node identity ac14140f, cluster identity 4711 [ 77.240599][ T4892] tipc: New replicast peer: 255.255.255.39 [ 77.246485][ T4892] tipc: Enabled bearer , priority 10 [ 77.262566][ T1038] net_ratelimit: 596 callbacks suppressed [ 77.262631][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.292933][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.307936][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.320828][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.332910][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.347701][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.356706][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.363566][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.370697][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.377557][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 77.436871][ T4910] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.491' sets config #1 [ 77.688078][ T4918] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.771344][ T4918] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.819863][ T4918] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.857472][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 77.893032][ T4918] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.968759][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 77.978767][ T4918] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.993736][ T4918] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004831][ T4918] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.018553][ T4918] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.085244][ T4945] dvmrp0: entered allmulticast mode [ 78.091284][ T4945] dvmrp0: left allmulticast mode [ 78.160480][ T4952] veth1_macvtap: left promiscuous mode [ 78.166025][ T4952] macsec0: entered promiscuous mode [ 78.284799][ T4967] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 78.294103][ T4967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.344775][ T4972] netlink: 'syz.3.514': attribute type 39 has an invalid length. [ 78.357275][ T3378] tipc: Node number set to 2886997007 [ 78.555021][ T4982] loop5: detected capacity change from 0 to 512 [ 78.581233][ T4982] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 78.589588][ T4982] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.589688][ T4979] capability: warning: `syz.0.516' uses deprecated v2 capabilities in a way that may be insecure [ 78.607208][ T4982] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.517: invalid indirect mapped block 256 (level 2) [ 78.638714][ T4982] EXT4-fs (loop5): 2 truncates cleaned up [ 78.644823][ T4982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.729888][ T4997] program syz.5.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.355380][ T5051] netlink: 'syz.3.520': attribute type 9 has an invalid length. [ 79.580204][ T5097] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 79.588092][ T5097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.526'. [ 79.619601][ T3378] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.628942][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.646230][ T3378] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.658661][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.357070][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.439901][ T5164] loop5: detected capacity change from 0 to 128 [ 80.457658][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 80.468547][ T5164] siw: device registration error -23 [ 80.528842][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.539'. [ 80.539426][ T5173] IPVS: Error joining to the multicast group [ 81.337180][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 81.343511][ T29] audit: type=1326 audit(1739153903.029:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 81.446671][ T5201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 81.515086][ T5212] hsr_slave_0: left promiscuous mode [ 81.525121][ T5212] hsr_slave_1: left promiscuous mode [ 82.167173][ T29] audit: type=1400 audit(1739153903.859:3692): avc: denied { name_bind } for pid=5228 comm="syz.4.556" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.189048][ T29] audit: type=1400 audit(1739153903.869:3693): avc: denied { bind } for pid=5228 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.208490][ T29] audit: type=1400 audit(1739153903.869:3694): avc: denied { name_bind } for pid=5228 comm="syz.4.556" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.230216][ T29] audit: type=1400 audit(1739153903.869:3695): avc: denied { node_bind } for pid=5228 comm="syz.4.556" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 82.332636][ T29] audit: type=1400 audit(1739153904.029:3696): avc: denied { sqpoll } for pid=5236 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.353442][ T29] audit: type=1400 audit(1739153904.029:3697): avc: denied { execute } for pid=5236 comm="syz.3.558" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 82.468212][ T29] audit: type=1400 audit(1739153904.169:3698): avc: denied { unmount } for pid=5239 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.468284][ T5240] Process accounting resumed [ 82.521375][ T29] audit: type=1326 audit(1739153904.219:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 82.544978][ T29] audit: type=1326 audit(1739153904.219:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 82.582081][ T5245] hub 9-0:1.0: USB hub found [ 82.586830][ T5245] hub 9-0:1.0: 8 ports detected [ 82.753292][ T5252] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 82.761120][ T5252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.563'. [ 82.773682][ T5252] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 82.782642][ T5252] team0: Failed to send options change via netlink (err -105) [ 82.790205][ T5252] team0: Port device geneve1 added [ 83.015478][ T5259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'. [ 83.076593][ T3377] IPVS: starting estimator thread 0... [ 83.167728][ T5267] IPVS: using max 2592 ests per chain, 129600 per kthread [ 83.467733][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.496757][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.723488][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 84.167834][ C1] net_ratelimit: 1016 callbacks suppressed [ 84.167849][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 84.181046][ T1038] 0: reclassify loop, rule prio 0, protocol 800 [ 84.305156][ T5328] block device autoloading is deprecated and will be removed. [ 84.317960][ T5328] syz.1.587: attempt to access beyond end of device [ 84.317960][ T5328] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.334191][ T5328] @ÿ: renamed from bond_slave_0 [ 84.375921][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.386002][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.400945][ T5333] serio: Serial port ttyS3 [ 84.453126][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 84.461979][ T5333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'. [ 85.687923][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.598'. [ 85.702057][ T5360] bond1: entered promiscuous mode [ 85.707122][ T5360] bond1: entered allmulticast mode [ 85.712653][ T5360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.726785][ T5355] rdma_op ffff88812f73a980 conn xmit_rdma 0000000000000000 [ 86.113529][ T5370] netlink: 76 bytes leftover after parsing attributes in process `syz.4.601'. [ 86.163958][ T5373] 9pnet_fd: Insufficient options for proto=fd [ 86.175909][ T5375] serio: Serial port ptm1 [ 86.205799][ T5373] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 86.481257][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 86.481270][ T29] audit: type=1400 audit(1739153908.179:3982): avc: denied { read } for pid=5382 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.550540][ T29] audit: type=1400 audit(1739153908.249:3983): avc: denied { create } for pid=5379 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.570514][ T29] audit: type=1400 audit(1739153908.249:3984): avc: denied { bind } for pid=5379 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.625327][ T5390] loop5: detected capacity change from 0 to 2048 [ 86.690003][ T5390] loop5: p3 < > p4 < > [ 86.694224][ T5390] loop5: partition table partially beyond EOD, truncated [ 86.701860][ T5390] loop5: p3 start 4284289 is beyond EOD, truncated [ 86.733901][ T29] audit: type=1400 audit(1739153908.419:3985): avc: denied { relabelfrom } for pid=5389 comm="syz.5.608" name="UNIX-STREAM" dev="sockfs" ino=11459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 86.758258][ T29] audit: type=1401 audit(1739153908.419:3986): op=setxattr invalid_context="" [ 86.816356][ T29] audit: type=1400 audit(1739153908.499:3987): avc: denied { setattr } for pid=5395 comm="syz.5.611" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.818357][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 86.928808][ T29] audit: type=1400 audit(1739153908.609:3988): avc: denied { setopt } for pid=5404 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.954385][ T5407] 9pnet_fd: Insufficient options for proto=fd [ 86.981613][ T5407] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 87.276021][ T5416] rdma_op ffff88812f738d80 conn xmit_rdma 0000000000000000 [ 87.457680][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 87.479226][ T5427] bond1: entered promiscuous mode [ 87.484318][ T5427] bond1: entered allmulticast mode [ 87.491405][ T5427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.659212][ T5436] loop5: detected capacity change from 0 to 1024 [ 87.685095][ T5436] EXT4-fs: Ignoring removed orlov option [ 87.800519][ T5436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.839980][ T5442] loop0: detected capacity change from 0 to 2048 [ 87.851098][ T29] audit: type=1400 audit(1739153909.549:3989): avc: denied { write } for pid=5435 comm="syz.5.624" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.883724][ T5442] loop0: p3 < > p4 < > [ 87.887962][ T5442] loop0: partition table partially beyond EOD, truncated [ 87.897899][ T5442] loop0: p3 start 4284289 is beyond EOD, truncated [ 87.918635][ T29] audit: type=1401 audit(1739153909.609:3990): op=setxattr invalid_context="" [ 87.981103][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 88.004825][ T29] audit: type=1326 audit(1739153909.699:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d069cde9 code=0x7ffc0000 [ 88.164163][ T5455] 9pnet_fd: Insufficient options for proto=fd [ 88.224298][ T5455] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 88.267083][ T5455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.442749][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.487354][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.710786][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.861310][ T5470] rdma_op ffff88812f739580 conn xmit_rdma 0000000000000000 [ 90.094935][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 90.131849][ T5498] loop0: detected capacity change from 0 to 512 [ 90.142325][ T5498] EXT4-fs: Ignoring removed oldalloc option [ 90.150067][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 90.169854][ T5499] bond1: entered promiscuous mode [ 90.174977][ T5499] bond1: entered allmulticast mode [ 90.180636][ T5499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.224159][ T5498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.653: Parent and EA inode have the same ino 15 [ 90.271768][ T5498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.653: Parent and EA inode have the same ino 15 [ 90.320729][ T5498] EXT4-fs (loop0): 1 orphan inode deleted [ 90.327108][ T5498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.342886][ T5509] loop5: detected capacity change from 0 to 512 [ 90.358936][ T5509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.372684][ T5509] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.385061][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.408097][ T5509] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.645: Failed to acquire dquot type 0 [ 90.569758][ T11] 0: reclassify loop, rule prio 0, protocol 800 [ 90.832494][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.383693][ T5534] loop5: detected capacity change from 0 to 128 [ 91.533018][ T5537] rdma_op ffff88812a786580 conn xmit_rdma 0000000000000000 [ 91.770396][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 91.770413][ T29] audit: type=1326 audit(1739153913.469:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.802467][ T5549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.821935][ T5552] sch_tbf: peakrate 12500000 is lower than or equals to rate 3221225472 ! [ 91.858425][ T29] audit: type=1326 audit(1739153913.499:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.881812][ T29] audit: type=1326 audit(1739153913.499:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.905274][ T29] audit: type=1326 audit(1739153913.499:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.928623][ T29] audit: type=1326 audit(1739153913.499:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.951932][ T29] audit: type=1326 audit(1739153913.499:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.975255][ T29] audit: type=1326 audit(1739153913.499:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 91.998578][ T29] audit: type=1326 audit(1739153913.499:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 92.021976][ T29] audit: type=1326 audit(1739153913.499:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 92.045298][ T29] audit: type=1326 audit(1739153913.499:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 92.110555][ T5555] bond0: (slave bond_slave_0): Releasing backup interface [ 92.127357][ T5555] bond0: (slave bond_slave_1): Releasing backup interface [ 92.145776][ T5555] team0: Port device team_slave_0 removed [ 92.160403][ T5555] team0: Port device team_slave_1 removed [ 92.167220][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.174943][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.194504][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.202004][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.267387][ T5556] team0: Mode changed to "loadbalance" [ 92.438567][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.660'. [ 92.461105][ T5567] loop5: detected capacity change from 0 to 512 [ 92.467929][ T5567] EXT4-fs: Ignoring removed oldalloc option [ 92.482491][ T5567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.660: Parent and EA inode have the same ino 15 [ 92.498851][ T5567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.660: Parent and EA inode have the same ino 15 [ 92.516970][ T5567] EXT4-fs (loop5): 1 orphan inode deleted [ 92.524699][ T5567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.856863][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.128110][ T40] 0: reclassify loop, rule prio 0, protocol 800 [ 94.437466][ T5581] loop0: detected capacity change from 0 to 512 [ 94.470721][ T5581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.484649][ T5581] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.104946][ T5571] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 283: padding at end of block bitmap is not set [ 95.122840][ T5581] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.662: Failed to acquire dquot type 0 [ 95.156125][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.396095][ T5602] rdma_op ffff88812f739580 conn xmit_rdma 0000000000000000 [ 95.634030][ T5616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.726045][ T5621] sch_tbf: peakrate 12500000 is lower than or equals to rate 3221225472 ! [ 96.116036][ T5627] loop0: detected capacity change from 0 to 512 [ 96.128433][ T5627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.179013][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.192562][ T5627] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.257943][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.304303][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'. [ 96.308571][ T5634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.681'. [ 96.328556][ T28] 0: reclassify loop, rule prio 0, protocol 800 [ 96.357845][ T5634] IPVS: Unknown mcast interface: vcan0 [ 96.364274][ T5638] tipc: New replicast peer: 255.255.255.255 [ 96.370503][ T5638] tipc: Enabled bearer , priority 10 [ 96.470158][ T5649] loop5: detected capacity change from 0 to 512 [ 96.580731][ T5649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.618105][ T5655] netlink: 'syz.1.689': attribute type 39 has an invalid length. [ 96.639715][ T5649] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.694666][ T5645] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.684: Failed to acquire dquot type 0 [ 96.721200][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.778453][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 96.778467][ T29] audit: type=1400 audit(1739153918.479:4530): avc: denied { bind } for pid=5656 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.949355][ T5662] siw: device registration error -23 [ 97.069795][ T5667] netlink: 128 bytes leftover after parsing attributes in process `syz.3.695'. [ 97.110778][ T29] audit: type=1400 audit(1739153918.809:4531): avc: denied { connect } for pid=5664 comm="syz.5.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.137454][ T5667] Falling back ldisc for ttyS3. [ 97.173038][ T29] audit: type=1400 audit(1739153918.869:4532): avc: denied { connect } for pid=5670 comm="syz.5.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.194604][ T5671] 0: reclassify loop, rule prio 0, protocol 800 [ 97.353758][ T5679] loop0: detected capacity change from 0 to 256 [ 97.597501][ T5686] loop5: detected capacity change from 0 to 256 [ 97.609735][ T3377] 0: reclassify loop, rule prio 0, protocol 800 [ 97.639899][ T5686] FAT-fs (loop5): Directory bread(block 64) failed [ 97.648723][ T29] audit: type=1326 audit(1739153919.329:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 97.672120][ T29] audit: type=1326 audit(1739153919.329:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 97.695461][ T29] audit: type=1326 audit(1739153919.329:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 97.698912][ T5686] FAT-fs (loop5): Directory bread(block 65) failed [ 97.718864][ T29] audit: type=1326 audit(1739153919.329:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e9dcde9 code=0x7ffc0000 [ 97.758502][ T5686] FAT-fs (loop5): Directory bread(block 66) failed [ 97.768349][ T5686] FAT-fs (loop5): Directory bread(block 67) failed [ 97.799143][ T5686] FAT-fs (loop5): Directory bread(block 68) failed [ 97.820084][ T5686] FAT-fs (loop5): Directory bread(block 69) failed [ 97.834570][ T5686] FAT-fs (loop5): Directory bread(block 70) failed [ 97.848854][ T5686] FAT-fs (loop5): Directory bread(block 71) failed [ 97.862539][ T5686] FAT-fs (loop5): Directory bread(block 72) failed [ 97.875433][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.891021][ T5686] FAT-fs (loop5): Directory bread(block 73) failed [ 97.945431][ T29] audit: type=1326 audit(1739153919.639:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.5.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 97.968953][ T29] audit: type=1326 audit(1739153919.639:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.5.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 97.992329][ T29] audit: type=1326 audit(1739153919.639:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.5.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 98.023328][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.318249][ T28] 0: reclassify loop, rule prio 0, protocol 800 [ 98.329042][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.422922][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.598510][ T5690] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.623620][ T5690] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.642046][ T5690] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.660774][ T5690] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.761082][ T5711] netlink: 128 bytes leftover after parsing attributes in process `syz.0.710'. [ 98.827415][ T5711] Falling back ldisc for ttyS3. [ 99.236522][ T5695] syz.4.706 (5695) used greatest stack depth: 6320 bytes left [ 99.461136][ T5740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 99.486156][ T5740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.495047][ T5740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.503781][ T5740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.512635][ T5740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.527435][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 99.830440][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 100.247333][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 100.807822][ T3377] 0: reclassify loop, rule prio 0, protocol 800 [ 100.853668][ T5784] syzkaller0: entered promiscuous mode [ 100.859256][ T5784] syzkaller0: entered allmulticast mode [ 100.968723][ T5796] bridge0: entered allmulticast mode [ 101.020170][ T5796] bond0: (slave bridge0): Releasing backup interface [ 101.192412][ T5802] xt_hashlimit: max too large, truncated to 1048576 [ 101.349605][ T5826] loop5: detected capacity change from 0 to 512 [ 101.357577][ T5826] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.368106][ T40] 0: reclassify loop, rule prio 0, protocol 800 [ 101.389833][ T5826] EXT4-fs (loop5): 1 truncate cleaned up [ 101.395908][ T5826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.787424][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 101.787439][ T29] audit: type=1326 audit(1739153923.489:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb458f3da7 code=0x7ffc0000 [ 101.827263][ T29] audit: type=1326 audit(1739153923.509:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb45898fb9 code=0x7ffc0000 [ 101.850589][ T29] audit: type=1326 audit(1739153923.509:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 101.873930][ T29] audit: type=1326 audit(1739153923.509:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb458f3da7 code=0x7ffc0000 [ 101.897342][ T29] audit: type=1326 audit(1739153923.509:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb45898fb9 code=0x7ffc0000 [ 101.920581][ T29] audit: type=1326 audit(1739153923.509:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb458f3da7 code=0x7ffc0000 [ 101.943898][ T29] audit: type=1326 audit(1739153923.509:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb45898fb9 code=0x7ffc0000 [ 101.967246][ T29] audit: type=1326 audit(1739153923.509:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ffb458fcde9 code=0x7ffc0000 [ 101.990603][ T29] audit: type=1326 audit(1739153923.519:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb458f3da7 code=0x7ffc0000 [ 102.013889][ T29] audit: type=1326 audit(1739153923.519:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb45898fb9 code=0x7ffc0000 [ 102.091006][ T5833] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.102720][ T5833] ÿÿÿÿÿÿ: renamed from vlan1 [ 102.232667][ T5841] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 102.260898][ T5841] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 102.470385][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.566767][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.771'. [ 102.643792][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.651072][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.752203][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.762028][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.790336][ T5863] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.798974][ T5863] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.807565][ T5863] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.815919][ T5863] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.825889][ T5863] bond1: left promiscuous mode [ 102.830751][ T5863] bond1: left allmulticast mode [ 102.898502][ T5876] loop5: detected capacity change from 0 to 512 [ 102.915379][ T5876] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8 [ 102.926904][ T5878] : renamed from bond0 (while UP) [ 103.426323][ T5892] loop0: detected capacity change from 0 to 128 [ 103.558235][ T5897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 103.567146][ T5897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 103.703605][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.709336][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.715014][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.720697][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.726350][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.732050][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.737756][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.743472][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.749162][ T5899] blackhole_netdev_xmit(): Dropping skb. [ 103.906888][ T5913] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.796'. [ 103.918010][ T5908] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.796'. [ 104.102172][ T5922] loop5: detected capacity change from 0 to 8192 [ 104.175746][ T5892] syz.0.781 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 104.189861][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: syz.0.781 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 104.189950][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.189977][ T5892] Call Trace: [ 104.189984][ T5892] [ 104.189993][ T5892] dump_stack_lvl+0xf2/0x150 [ 104.190023][ T5892] dump_stack+0x15/0x1a [ 104.190063][ T5892] dump_header+0x83/0x2d0 [ 104.190137][ T5892] oom_kill_process+0x341/0x4c0 [ 104.190169][ T5892] out_of_memory+0x9af/0xbe0 [ 104.190200][ T5892] ? css_next_descendant_pre+0x11c/0x140 [ 104.190224][ T5892] mem_cgroup_out_of_memory+0x13e/0x190 [ 104.190292][ T5892] try_charge_memcg+0x508/0x7f0 [ 104.190337][ T5892] obj_cgroup_charge_pages+0xbd/0x1a0 [ 104.190373][ T5892] __memcg_kmem_charge_page+0x9d/0x170 [ 104.190461][ T5892] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 104.190558][ T5892] alloc_pages_mpol+0xb4/0x260 [ 104.190595][ T5892] alloc_pages_noprof+0xe8/0x130 [ 104.190631][ T5892] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 104.190685][ T5892] __kvmalloc_node_noprof+0x121/0x170 [ 104.190711][ T5892] ? ip_set_alloc+0x1f/0x30 [ 104.190735][ T5892] ip_set_alloc+0x1f/0x30 [ 104.190759][ T5892] hash_netiface_create+0x273/0x730 [ 104.190864][ T5892] ? __nla_parse+0x40/0x60 [ 104.190885][ T5892] ? __pfx_hash_netiface_create+0x10/0x10 [ 104.190911][ T5892] ip_set_create+0x359/0x8a0 [ 104.190938][ T5892] ? __pfx_memchr+0x1/0x10 [ 104.191052][ T5892] ? __nla_parse+0x40/0x60 [ 104.191075][ T5892] nfnetlink_rcv_msg+0x4a9/0x570 [ 104.191177][ T5892] netlink_rcv_skb+0x12c/0x230 [ 104.191209][ T5892] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 104.191247][ T5892] nfnetlink_rcv+0x16c/0x15d0 [ 104.191267][ T5892] ? kmem_cache_free+0xdc/0x2d0 [ 104.191302][ T5892] ? nlmon_xmit+0x51/0x60 [ 104.191338][ T5892] ? __kfree_skb+0x102/0x150 [ 104.191368][ T5892] ? consume_skb+0x49/0x160 [ 104.191393][ T5892] ? nlmon_xmit+0x51/0x60 [ 104.191486][ T5892] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 104.191517][ T5892] ? __dev_queue_xmit+0xb6e/0x2090 [ 104.191547][ T5892] ? ref_tracker_free+0x3a5/0x410 [ 104.191643][ T5892] ? __dev_queue_xmit+0x186/0x2090 [ 104.191677][ T5892] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 104.191745][ T5892] netlink_unicast+0x599/0x670 [ 104.191777][ T5892] netlink_sendmsg+0x5cc/0x6e0 [ 104.191815][ T5892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.191936][ T5892] __sock_sendmsg+0x140/0x180 [ 104.192013][ T5892] ____sys_sendmsg+0x312/0x410 [ 104.192045][ T5892] __sys_sendmsg+0x19d/0x230 [ 104.192089][ T5892] __x64_sys_sendmsg+0x46/0x50 [ 104.192175][ T5892] x64_sys_call+0x2734/0x2dc0 [ 104.192202][ T5892] do_syscall_64+0xc9/0x1c0 [ 104.192292][ T5892] ? clear_bhb_loop+0x55/0xb0 [ 104.192326][ T5892] ? clear_bhb_loop+0x55/0xb0 [ 104.192385][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.192496][ T5892] RIP: 0033:0x7f162e9dcde9 [ 104.192517][ T5892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.192548][ T5892] RSP: 002b:00007f162d047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.192568][ T5892] RAX: ffffffffffffffda RBX: 00007f162ebf5fa0 RCX: 00007f162e9dcde9 [ 104.192581][ T5892] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 104.192593][ T5892] RBP: 00007f162ea5e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.192605][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.192617][ T5892] R13: 0000000000000000 R14: 00007f162ebf5fa0 R15: 00007fff2dafb238 [ 104.192636][ T5892] [ 104.192642][ T5892] memory: usage 307200kB, limit 307200kB, failcnt 221 [ 104.543305][ T5892] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 104.551224][ T5892] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 104.558531][ T5892] Memory cgroup stats for /syz0: [ 104.558811][ T5892] cache 0 [ 104.566761][ T5892] rss 0 [ 104.569721][ T5892] shmem 0 [ 104.572654][ T5892] mapped_file 0 [ 104.576112][ T5892] dirty 0 [ 104.579064][ T5892] writeback 0 [ 104.582352][ T5892] workingset_refault_anon 3032 [ 104.587107][ T5892] workingset_refault_file 146 [ 104.591814][ T5892] swap 442368 [ 104.595146][ T5892] swapcached 4096 [ 104.598784][ T5892] pgpgin 119986 [ 104.602264][ T5892] pgpgout 119985 [ 104.605822][ T5892] pgfault 137431 [ 104.609386][ T5892] pgmajfault 181 [ 104.612940][ T5892] inactive_anon 4096 [ 104.616858][ T5892] active_anon 0 [ 104.620344][ T5892] inactive_file 0 [ 104.624054][ T5892] active_file 0 [ 104.627542][ T5892] unevictable 0 [ 104.631001][ T5892] hierarchical_memory_limit 314572800 [ 104.636364][ T5892] hierarchical_memsw_limit 9223372036854771712 [ 104.642551][ T5892] total_cache 0 [ 104.646007][ T5892] total_rss 0 [ 104.649495][ T5892] total_shmem 0 [ 104.652953][ T5892] total_mapped_file 0 [ 104.656923][ T5892] total_dirty 0 [ 104.660434][ T5892] total_writeback 0 [ 104.664335][ T5892] total_workingset_refault_anon 3032 [ 104.669651][ T5892] total_workingset_refault_file 146 [ 104.674857][ T5892] total_swap 442368 [ 104.678705][ T5892] total_swapcached 4096 [ 104.682916][ T5892] total_pgpgin 119986 [ 104.686891][ T5892] total_pgpgout 119985 [ 104.691080][ T5892] total_pgfault 137431 [ 104.695151][ T5892] total_pgmajfault 181 [ 104.699307][ T5892] total_inactive_anon 4096 [ 104.703725][ T5892] total_active_anon 0 [ 104.707718][ T5892] total_inactive_file 0 [ 104.711913][ T5892] total_active_file 0 [ 104.715881][ T5892] total_unevictable 0 [ 104.719896][ T5892] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.781,pid=5891,uid=0 [ 104.734582][ T5892] Memory cgroup out of memory: Killed process 5891 (syz.0.781) total-vm:95760kB, anon-rss:916kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 104.863102][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.793'. [ 104.931602][ T5932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5932 comm=syz.4.795 [ 104.944100][ T5932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5932 comm=syz.4.795 [ 105.101607][ T5948] rdma_op ffff8881409f1980 conn xmit_rdma 0000000000000000 [ 105.127803][ T5950] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.800'. [ 105.138273][ T5942] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.800'. [ 105.203132][ T5957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.308612][ T5964] netlink: 'syz.0.809': attribute type 3 has an invalid length. [ 105.329843][ T5964] loop0: detected capacity change from 0 to 512 [ 105.351793][ T5957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.395682][ T5970] netlink: 128 bytes leftover after parsing attributes in process `syz.1.811'. [ 105.412221][ T5964] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.428129][ T5957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.431877][ T5974] loop5: detected capacity change from 0 to 256 [ 105.444975][ T5964] EXT4-fs (loop0): mount failed [ 105.507502][ T5957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.593123][ T5957] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.601795][ T5975] Falling back ldisc for ttyS3. [ 105.612644][ T5957] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.622125][ T5989] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.817'. [ 105.634724][ T5957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.655141][ T5987] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.817'. [ 105.679764][ T5957] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.699013][ T5993] block device autoloading is deprecated and will be removed. [ 106.621267][ T6016] loop0: detected capacity change from 0 to 512 [ 106.644821][ T6024] bridge0: entered allmulticast mode [ 106.645446][ T6016] EXT4-fs (loop0): failed to initialize system zone (-117) [ 106.660069][ T6016] EXT4-fs (loop0): mount failed [ 106.704963][ T6030] netlink: 128 bytes leftover after parsing attributes in process `syz.5.831'. [ 106.777447][ T6030] Falling back ldisc for ttyS3. [ 106.798964][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 106.798978][ T29] audit: type=1326 audit(1739416328.501:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d0693da7 code=0x7ffc0000 [ 106.836110][ T29] audit: type=1326 audit(1739416328.531:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d0638fb9 code=0x7ffc0000 [ 106.859466][ T29] audit: type=1326 audit(1739416328.531:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d0693da7 code=0x7ffc0000 [ 106.882802][ T29] audit: type=1326 audit(1739416328.531:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d0638fb9 code=0x7ffc0000 [ 106.906066][ T29] audit: type=1326 audit(1739416328.531:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d0693da7 code=0x7ffc0000 [ 106.929320][ T29] audit: type=1326 audit(1739416328.531:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d0638fb9 code=0x7ffc0000 [ 106.952602][ T29] audit: type=1326 audit(1739416328.531:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f64d069cde9 code=0x7ffc0000 [ 106.975992][ T29] audit: type=1326 audit(1739416328.561:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d0693da7 code=0x7ffc0000 [ 106.999265][ T29] audit: type=1326 audit(1739416328.561:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d0638fb9 code=0x7ffc0000 [ 107.022559][ T29] audit: type=1326 audit(1739416328.561:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f64d069cde9 code=0x7ffc0000 [ 107.118954][ T6041] loop5: detected capacity change from 0 to 512 [ 107.129016][ T6041] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.150311][ T6041] EXT4-fs (loop5): 1 truncate cleaned up [ 107.165247][ T6041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.216208][ T6041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.262339][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 107.281022][ T6037] xt_hashlimit: max too large, truncated to 1048576 [ 107.289221][ T6037] Cannot find set identified by id 0 to match [ 107.602775][ T6063] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.721211][ T6063] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.800715][ T6063] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.868587][ T6063] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.886290][ T6070] bridge0: entered allmulticast mode [ 107.894279][ T6070] bridge_slave_1: left allmulticast mode [ 107.900441][ T6070] bridge_slave_1: left promiscuous mode [ 107.906376][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.914710][ T6070] bridge_slave_0: left allmulticast mode [ 107.920533][ T6070] bridge_slave_0: left promiscuous mode [ 107.926324][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.974405][ T6063] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.985673][ T6063] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.997293][ T6063] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.008785][ T6063] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.265010][ T6090] netlink: 'syz.3.851': attribute type 4 has an invalid length. [ 108.827613][ T6096] xt_hashlimit: max too large, truncated to 1048576 [ 108.835682][ T6096] Cannot find set identified by id 0 to match [ 109.073350][ T6109] net_ratelimit: 596 callbacks suppressed [ 109.073364][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.084881][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.090565][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.096276][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.102019][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.107715][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.113353][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.119071][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.124708][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.130397][ T6109] blackhole_netdev_xmit(): Dropping skb. [ 109.561599][ T6134] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.631623][ T6134] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.656879][ T6136] loop5: detected capacity change from 0 to 128 [ 109.683467][ T6136] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.697089][ T6136] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.739081][ T6134] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.788955][ T6134] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.826173][ T4613] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.874497][ T6143] loop0: detected capacity change from 0 to 1024 [ 109.876852][ T6134] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.911855][ T6134] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.936568][ T6134] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.954996][ T6143] EXT4-fs: Ignoring removed orlov option [ 109.969263][ T6143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.987236][ T6134] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.812425][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.842032][ T6157] bridge0: entered allmulticast mode [ 110.936826][ T6166] sch_tbf: peakrate 12500000 is lower than or equals to rate 3221225472 ! [ 111.182000][ T6181] loop5: detected capacity change from 0 to 1024 [ 111.188953][ T6185] loop0: detected capacity change from 0 to 128 [ 111.202527][ T6181] EXT4-fs: Ignoring removed orlov option [ 111.216082][ T6185] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.230326][ T6185] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.265014][ T6181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.371335][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.083446][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.183142][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 112.183157][ T29] audit: type=1326 audit(1739416333.881:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.212984][ T29] audit: type=1326 audit(1739416333.881:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.213017][ T29] audit: type=1326 audit(1739416333.881:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.213066][ T29] audit: type=1326 audit(1739416333.881:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f076c7dce23 code=0x7ffc0000 [ 112.261266][ T6208] loop5: detected capacity change from 0 to 512 [ 112.282915][ T29] audit: type=1326 audit(1739416333.881:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f076c7dce23 code=0x7ffc0000 [ 112.312395][ T29] audit: type=1326 audit(1739416333.881:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.318844][ T6208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.335905][ T29] audit: type=1326 audit(1739416333.881:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.360035][ T6208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.413176][ T6208] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.423914][ T6211] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 112.441634][ T29] audit: type=1326 audit(1739416333.891:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.465059][ T29] audit: type=1326 audit(1739416333.941:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.488476][ T29] audit: type=1326 audit(1739416333.941:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 112.523857][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.587380][ T6220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.679294][ T6224] syzkaller0: entered promiscuous mode [ 112.684816][ T6224] syzkaller0: entered allmulticast mode [ 112.784510][ T6233] loop0: detected capacity change from 0 to 1024 [ 112.791395][ T6233] EXT4-fs: Ignoring removed orlov option [ 112.806162][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.877863][ T6240] loop3: detected capacity change from 0 to 512 [ 112.904963][ T6240] EXT4-fs: Ignoring removed orlov option [ 112.923427][ T6240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.031358][ T6240] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.039946][ T6240] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.046935][ T6240] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.905: bg 0: block 248: padding at end of block bitmap is not set [ 113.062880][ T6240] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.905: Failed to acquire dquot type 1 [ 113.074980][ T6240] EXT4-fs (loop3): 1 truncate cleaned up [ 113.082163][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.173056][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.686570][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.891392][ T6260] __nla_validate_parse: 1 callbacks suppressed [ 113.891416][ T6260] netlink: 3 bytes leftover after parsing attributes in process `syz.5.915'. [ 113.910949][ T6266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.919627][ T6260] 0ªX¹¦À: renamed from caif0 [ 113.925858][ T6260] 0ªX¹¦À: entered allmulticast mode [ 113.931556][ T6263] loop3: detected capacity change from 0 to 1024 [ 113.938531][ T6263] EXT4-fs: Ignoring removed orlov option [ 113.944377][ T6267] loop0: detected capacity change from 0 to 256 [ 113.967696][ T6263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.991563][ T6267] FAT-fs (loop0): Directory bread(block 64) failed [ 113.998508][ T6267] FAT-fs (loop0): Directory bread(block 65) failed [ 114.005186][ T6267] FAT-fs (loop0): Directory bread(block 66) failed [ 114.012226][ T6267] FAT-fs (loop0): Directory bread(block 67) failed [ 114.018851][ T6267] FAT-fs (loop0): Directory bread(block 68) failed [ 114.025771][ T6267] FAT-fs (loop0): Directory bread(block 69) failed [ 114.032968][ T6267] FAT-fs (loop0): Directory bread(block 70) failed [ 114.039721][ T6267] FAT-fs (loop0): Directory bread(block 71) failed [ 114.046357][ T6267] FAT-fs (loop0): Directory bread(block 72) failed [ 114.053282][ T6267] FAT-fs (loop0): Directory bread(block 73) failed [ 114.075602][ T6271] bridge0: entered allmulticast mode [ 114.126699][ T6267] syz.0.923: attempt to access beyond end of device [ 114.126699][ T6267] loop0: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 114.140693][ T6267] syz.0.923: attempt to access beyond end of device [ 114.140693][ T6267] loop0: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 114.907557][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.266956][ T6320] loop0: detected capacity change from 0 to 512 [ 115.275716][ T6322] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.277739][ T6320] EXT4-fs: Ignoring removed i_version option [ 115.288476][ T6320] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.318390][ T6320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.379068][ T6320] EXT4-fs (loop0): 1 truncate cleaned up [ 115.385717][ T6320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.740755][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.894986][ T6330] loop0: detected capacity change from 0 to 1024 [ 115.905891][ T6330] EXT4-fs: Ignoring removed orlov option [ 115.928006][ T6330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.119277][ T6338] loop5: detected capacity change from 0 to 512 [ 116.130026][ T6338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.161596][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.286576][ T6338] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.325211][ T4613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.567567][ T6335] ================================================================== [ 116.575705][ T6335] BUG: KCSAN: data-race in __mark_inode_dirty / generic_buffers_fsync_noflush [ 116.584586][ T6335] [ 116.586913][ T6335] write to 0xffff888106744ab8 of 4 bytes by task 6330 on cpu 0: [ 116.595217][ T6335] __mark_inode_dirty+0x24e/0x7e0 [ 116.600260][ T6335] file_modified_flags+0x2ec/0x320 [ 116.605390][ T6335] file_modified+0x17/0x20 [ 116.609825][ T6335] ext4_buffered_write_iter+0x1cf/0x3c0 [ 116.615383][ T6335] ext4_file_write_iter+0x383/0xf20 [ 116.620597][ T6335] iter_file_splice_write+0x5f1/0x980 [ 116.625978][ T6335] direct_splice_actor+0x160/0x2c0 [ 116.631097][ T6335] splice_direct_to_actor+0x302/0x670 [ 116.636481][ T6335] do_splice_direct+0xd7/0x150 [ 116.641251][ T6335] do_sendfile+0x398/0x660 [ 116.645681][ T6335] __x64_sys_sendfile64+0x110/0x150 [ 116.650898][ T6335] x64_sys_call+0xfbd/0x2dc0 [ 116.655499][ T6335] do_syscall_64+0xc9/0x1c0 [ 116.660012][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.665916][ T6335] [ 116.668251][ T6335] read to 0xffff888106744ab8 of 4 bytes by task 6335 on cpu 1: [ 116.675813][ T6335] generic_buffers_fsync_noflush+0x83/0x120 [ 116.681724][ T6335] ext4_sync_file+0x1ff/0x6c0 [ 116.686419][ T6335] vfs_fsync_range+0x116/0x130 [ 116.691228][ T6335] ext4_buffered_write_iter+0x358/0x3c0 [ 116.696784][ T6335] ext4_file_write_iter+0x383/0xf20 [ 116.701986][ T6335] iter_file_splice_write+0x5f1/0x980 [ 116.707368][ T6335] direct_splice_actor+0x160/0x2c0 [ 116.712477][ T6335] splice_direct_to_actor+0x302/0x670 [ 116.717870][ T6335] do_splice_direct+0xd7/0x150 [ 116.722632][ T6335] do_sendfile+0x398/0x660 [ 116.727088][ T6335] __x64_sys_sendfile64+0x110/0x150 [ 116.732300][ T6335] x64_sys_call+0xfbd/0x2dc0 [ 116.736896][ T6335] do_syscall_64+0xc9/0x1c0 [ 116.741402][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.747296][ T6335] [ 116.749615][ T6335] value changed: 0x00000000 -> 0x00000028 [ 116.755345][ T6335] [ 116.757660][ T6335] Reported by Kernel Concurrency Sanitizer on: [ 116.763805][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.0.938 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 116.774402][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.784462][ T6335] ================================================================== [ 116.929010][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.193043][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 117.193064][ T29] audit: type=1326 audit(1739416338.891:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f076c7d3da7 code=0x7ffc0000 [ 117.222629][ T29] audit: type=1326 audit(1739416338.891:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f076c778fb9 code=0x7ffc0000 [ 117.246088][ T29] audit: type=1326 audit(1739416338.891:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 117.269429][ T29] audit: type=1326 audit(1739416338.901:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f076c7d3da7 code=0x7ffc0000 [ 117.293043][ T29] audit: type=1326 audit(1739416338.901:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f076c778fb9 code=0x7ffc0000 [ 117.316337][ T29] audit: type=1326 audit(1739416338.901:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000 [ 117.339678][ T29] audit: type=1326 audit(1739416338.901:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f076c7d3da7 code=0x7ffc0000 [ 117.363038][ T29] audit: type=1326 audit(1739416338.901:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f076c778fb9 code=0x7ffc0000 [ 117.386265][ T29] audit: type=1326 audit(1739416338.901:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f076c7dcde9 code=0x7ffc0000