last executing test programs: 1m42.749936649s ago: executing program 4 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 1m42.694715949s ago: executing program 4 (id=925): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7d129c75a61f23b02000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 1m42.657479439s ago: executing program 4 (id=926): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r1, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) 1m42.481169548s ago: executing program 4 (id=929): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x4000) fallocate(r0, 0x0, 0x0, 0x1000f4) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x20) 1m42.255489918s ago: executing program 4 (id=938): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) 1m42.116560567s ago: executing program 4 (id=946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10d800, 0x0) 1m42.073175257s ago: executing program 32 (id=946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10d800, 0x0) 1m23.913898066s ago: executing program 1 (id=1537): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0) 1m23.659494345s ago: executing program 1 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) 1m23.578550995s ago: executing program 1 (id=1545): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1m23.407950334s ago: executing program 1 (id=1553): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x4000) fallocate(r0, 0x0, 0x0, 0x1000f4) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x20) 1m23.207860214s ago: executing program 1 (id=1557): gettid() timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8380000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) timer_gettime(r0, 0x0) timer_settime(r0, 0xc2a9019e9b3c5d83, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000040)) 1m23.101535783s ago: executing program 1 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x109, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 1m23.074584143s ago: executing program 33 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x109, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 53.460182978s ago: executing program 0 (id=2514): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xb0783914ddc2892c, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x58}}, 0x0) 53.415749868s ago: executing program 0 (id=2517): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 53.391075038s ago: executing program 0 (id=2519): mq_notify(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @mcast2={0xff, 0x5}, 0x3ff}, r2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 53.191902647s ago: executing program 0 (id=2523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000002f40), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x8000) 53.103636197s ago: executing program 0 (id=2527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, 0x0, 0x3, 0x0) 52.869626456s ago: executing program 0 (id=2536): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) setresuid(r1, r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 52.852489195s ago: executing program 34 (id=2536): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) setresuid(r1, r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 8.756577324s ago: executing program 2 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 8.633901674s ago: executing program 2 (id=2858): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000480)={0x19980330}, &(0x7f0000000140)={0x4, 0x7, 0x10007, 0xff, 0x20000104, 0x7}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) 8.548757393s ago: executing program 3 (id=2860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x30}, 0x0) 8.242484782s ago: executing program 3 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 7.58766192s ago: executing program 7 (id=2873): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) 6.732808726s ago: executing program 7 (id=2879): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2.49917341s ago: executing program 2 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 2.49905073s ago: executing program 3 (id=2881): ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000080)={0x2, 0x11, 0x3}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000ff0000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.49676387s ago: executing program 7 (id=2890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.179347819s ago: executing program 2 (id=2885): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 2.113723118s ago: executing program 6 (id=2887): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002680)) socket$key(0xf, 0x3, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 2.018336018s ago: executing program 3 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000015) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) 1.920057847s ago: executing program 2 (id=2889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 1.899880657s ago: executing program 7 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x817}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 1.855094117s ago: executing program 3 (id=2892): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x6282, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.781856427s ago: executing program 3 (id=2893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r1, &(0x7f0000000140)=""/68, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) 1.781352377s ago: executing program 6 (id=2894): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e"], 0x1fc) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.645355946s ago: executing program 6 (id=2896): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.546363866s ago: executing program 2 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") 1.340605925s ago: executing program 6 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) iopl(0x3) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20) 1.162853895s ago: executing program 7 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r2, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 1.155888685s ago: executing program 6 (id=2900): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@errors_continue}, {@noinit_itable}]}, 0x1, 0x4ff, &(0x7f0000001640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x23456}) syz_io_uring_setup(0x41ae, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.039521054s ago: executing program 7 (id=2901): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 890.005433ms ago: executing program 6 (id=2914): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 575.354272ms ago: executing program 5 (id=2905): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x20000000, 0x100, 0x0, 0x1}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 520.463742ms ago: executing program 5 (id=2906): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000980), 0x4) 232.488191ms ago: executing program 5 (id=2907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 202.927721ms ago: executing program 5 (id=2909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x64) 35.44459ms ago: executing program 5 (id=2910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r0, 0xd75) listen(r1, 0x0) 0s ago: executing program 5 (id=2911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x817}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) kernel console output (not intermixed with test programs): e0: port 1(bridge_slave_0) entered disabled state [ 82.530672][ T7665] bridge_slave_0: entered allmulticast mode [ 82.542165][ T7665] bridge_slave_0: entered promiscuous mode [ 82.558383][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.565473][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.584256][ T7665] bridge_slave_1: entered allmulticast mode [ 82.590614][ T7665] bridge_slave_1: entered promiscuous mode [ 82.683839][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.704783][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.749506][ T7762] loop2: detected capacity change from 0 to 164 [ 82.790356][ T7762] syz.2.1585: attempt to access beyond end of device [ 82.790356][ T7762] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 82.818336][ T7762] syz.2.1585: attempt to access beyond end of device [ 82.818336][ T7762] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 82.834425][ T7665] team0: Port device team_slave_0 added [ 82.845792][ T7665] team0: Port device team_slave_1 added [ 82.869398][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.876414][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.901074][ T7768] hub 5-0:1.0: USB hub found [ 82.902310][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.907828][ T7768] hub 5-0:1.0: 8 ports detected [ 82.918099][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.929264][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.955357][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.975316][ T29] audit: type=1400 audit(1734891674.579:2964): avc: denied { write } for pid=7769 comm="syz.3.1586" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.998631][ T29] audit: type=1400 audit(1734891674.579:2965): avc: denied { open } for pid=7769 comm="syz.3.1586" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.022787][ T29] audit: type=1400 audit(1734891674.579:2966): avc: denied { ioctl } for pid=7769 comm="syz.3.1586" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.076134][ T7665] hsr_slave_0: entered promiscuous mode [ 83.087816][ T7665] hsr_slave_1: entered promiscuous mode [ 83.098389][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.113143][ T7665] Cannot create hsr debugfs directory [ 83.118957][ T7779] loop7: detected capacity change from 0 to 16384 [ 83.132506][ T29] audit: type=1400 audit(1734891674.809:2967): avc: denied { write } for pid=7780 comm="syz.5.1592" name="kcm" dev="proc" ino=4026533421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.167857][ T7779] loop7: detected capacity change from 16384 to 16383 [ 83.520302][ T7832] loop6: detected capacity change from 0 to 164 [ 83.557139][ T7832] syz.6.1602: attempt to access beyond end of device [ 83.557139][ T7832] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 83.568194][ T7665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.583540][ T7832] syz.6.1602: attempt to access beyond end of device [ 83.583540][ T7832] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.599216][ T7665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.609517][ T7665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.628027][ T7665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.635071][ T7840] loop7: detected capacity change from 0 to 16384 [ 83.670164][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.685171][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.694851][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.701932][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.707177][ T7842] hub 5-0:1.0: USB hub found [ 83.709802][ T7840] loop7: detected capacity change from 16384 to 16383 [ 83.714266][ T7842] hub 5-0:1.0: 8 ports detected [ 83.742191][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.749402][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.795653][ T7665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.891441][ T7867] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.900283][ T7867] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.909154][ T7867] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.918070][ T7867] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.934575][ T7867] vxlan0: entered promiscuous mode [ 83.939761][ T7867] vxlan0: entered allmulticast mode [ 83.939916][ T7870] loop6: detected capacity change from 0 to 2048 [ 83.957007][ T7867] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.966048][ T7867] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.975034][ T7867] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.983973][ T7867] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.009146][ T7870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.033472][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.142519][ T7903] loop5: detected capacity change from 0 to 256 [ 84.155063][ T7903] FAT-fs (loop5): bogus number of FAT sectors [ 84.161232][ T7903] FAT-fs (loop5): Can't find a valid FAT filesystem [ 84.168848][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.250005][ T7665] veth0_vlan: entered promiscuous mode [ 84.263322][ T7917] netlink: 'syz.2.1617': attribute type 3 has an invalid length. [ 84.285699][ T7665] veth1_vlan: entered promiscuous mode [ 84.345045][ T7665] veth0_macvtap: entered promiscuous mode [ 84.351730][ T7924] loop7: detected capacity change from 0 to 16384 [ 84.366323][ T7665] veth1_macvtap: entered promiscuous mode [ 84.385420][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.395996][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.405873][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.416341][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.426173][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.436758][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.446740][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.457188][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.467083][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.477551][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.488346][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.504349][ T7924] loop7: detected capacity change from 16384 to 16383 [ 84.511867][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.522378][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.532350][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.542826][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.552664][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.563133][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.573070][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.583608][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.593551][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.604003][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.615490][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.639001][ T7665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647780][ T7665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.656537][ T7665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.665260][ T7665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960444][ T7984] loop5: detected capacity change from 0 to 2048 [ 84.993860][ T7996] loop2: detected capacity change from 0 to 256 [ 84.998202][ T7986] loop6: detected capacity change from 0 to 8192 [ 85.015505][ T7996] FAT-fs (loop2): bogus number of FAT sectors [ 85.021609][ T7996] FAT-fs (loop2): Can't find a valid FAT filesystem [ 85.043086][ T7999] netlink: 'syz.0.1644': attribute type 3 has an invalid length. [ 85.053299][ T7984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.190410][ T8009] loop3: detected capacity change from 0 to 256 [ 85.210538][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.273545][ T8009] FAT-fs (loop3): bogus number of FAT sectors [ 85.279763][ T8009] FAT-fs (loop3): Can't find a valid FAT filesystem [ 85.549210][ T8032] block device autoloading is deprecated and will be removed. [ 85.595904][ T8037] loop5: detected capacity change from 0 to 512 [ 85.616042][ T8041] loop6: detected capacity change from 0 to 256 [ 85.628246][ T8041] FAT-fs (loop6): bogus number of FAT sectors [ 85.628574][ T8037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.634517][ T8041] FAT-fs (loop6): Can't find a valid FAT filesystem [ 85.653757][ T8043] loop2: detected capacity change from 0 to 2048 [ 85.706652][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.742873][ T8037] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.747328][ T8053] loop3: detected capacity change from 0 to 1024 [ 85.760220][ T8053] EXT4-fs: Ignoring removed nobh option [ 85.843587][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.863664][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.966793][ T8071] vhci_hcd: default hub control req: 4001 v0220 i0001 l0 [ 85.978452][ T7489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.984652][ T8037] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #18: comm syz.5.1662: corrupted inode contents [ 86.009496][ T8037] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #18: comm syz.5.1662: mark_inode_dirty error [ 86.042097][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 86.088598][ T8037] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #18: comm syz.5.1662: corrupted inode contents [ 86.101187][ T8037] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #18: comm syz.5.1662: mark_inode_dirty error [ 86.113396][ T8037] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #18: comm syz.5.1662: mark inode dirty (error -117) [ 86.127913][ T8037] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 86.195532][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.321600][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 86.350631][ T8090] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.359484][ T8090] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.368231][ T8090] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.377075][ T8090] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.398305][ T8090] vxlan0: entered promiscuous mode [ 86.403542][ T8090] vxlan0: entered allmulticast mode [ 86.558594][ T8121] loop2: detected capacity change from 0 to 164 [ 86.576190][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1696'. [ 86.583101][ T8119] loop5: detected capacity change from 0 to 8192 [ 86.632537][ T8125] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 86.644163][ T8125] SELinux: failed to load policy [ 86.656825][ T8121] rock: directory entry would overflow storage [ 86.663029][ T8121] rock: sig=0x4f50, size=4, remaining=3 [ 86.668711][ T8121] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 86.849046][ T8136] loop2: detected capacity change from 0 to 8192 [ 86.909175][ T8147] loop6: detected capacity change from 0 to 512 [ 86.947012][ T8147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.963649][ T8147] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.980429][ T8147] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #18: comm syz.6.1708: corrupted inode contents [ 86.995829][ T8147] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #18: comm syz.6.1708: mark_inode_dirty error [ 87.008339][ T8147] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #18: comm syz.6.1708: corrupted inode contents [ 87.023822][ T8157] pim6reg: entered allmulticast mode [ 87.031676][ T8157] pim6reg: left allmulticast mode [ 87.038930][ T8147] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #18: comm syz.6.1708: mark_inode_dirty error [ 87.051407][ T8147] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #18: comm syz.6.1708: mark inode dirty (error -117) [ 87.063263][ T8161] loop2: detected capacity change from 0 to 512 [ 87.069960][ T8147] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 87.086572][ T8161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.099658][ T8161] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.100471][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.149242][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.168932][ T8169] ip_vti0: entered promiscuous mode [ 87.176559][ T8169] vlan2: entered promiscuous mode [ 87.192046][ T8168] program syz.3.1716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.201536][ T8169] ip_vti0: left promiscuous mode [ 87.266085][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 87.266128][ T29] audit: type=1400 audit(1734891678.949:3057): avc: denied { read } for pid=8175 comm="syz.3.1719" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.283379][ T8176] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 87.302466][ T29] audit: type=1400 audit(1734891678.979:3058): avc: denied { open } for pid=8175 comm="syz.3.1719" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.302494][ T29] audit: type=1400 audit(1734891678.979:3059): avc: denied { ioctl } for pid=8175 comm="syz.3.1719" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.325902][ T8176] SELinux: failed to load policy [ 87.469748][ T29] audit: type=1326 audit(1734891679.149:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.493219][ T29] audit: type=1326 audit(1734891679.149:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.516889][ T29] audit: type=1326 audit(1734891679.149:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.540363][ T29] audit: type=1326 audit(1734891679.149:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.563796][ T29] audit: type=1326 audit(1734891679.149:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.587330][ T29] audit: type=1326 audit(1734891679.149:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.610765][ T29] audit: type=1326 audit(1734891679.149:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.6.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 87.718081][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1732'. [ 87.770558][ T8195] program syz.5.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.959891][ T8215] program syz.2.1749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.056270][ T8235] loop5: detected capacity change from 0 to 164 [ 88.078707][ T8235] rock: directory entry would overflow storage [ 88.084964][ T8235] rock: sig=0x4f50, size=4, remaining=3 [ 88.090592][ T8235] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 88.132523][ T8239] loop2: detected capacity change from 0 to 512 [ 88.196928][ T8239] EXT4-fs (loop2): too many log groups per flexible block group [ 88.204684][ T8239] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 88.211511][ T8239] EXT4-fs (loop2): mount failed [ 88.260298][ T8252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8252 comm=syz.0.1754 [ 88.363091][ T8256] loop2: detected capacity change from 0 to 8192 [ 88.669561][ T8266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1761'. [ 88.669618][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1768'. [ 88.744496][ T8268] program syz.6.1758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.824774][ T8283] ip_vti0: entered promiscuous mode [ 88.830163][ T8283] vlan2: entered promiscuous mode [ 88.837743][ T8283] ip_vti0: left promiscuous mode [ 88.908000][ T8295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8295 comm=syz.3.1775 [ 88.947390][ T8297] program syz.5.1776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.164035][ T8312] loop5: detected capacity change from 0 to 8192 [ 89.172174][ T8319] loop2: detected capacity change from 0 to 2048 [ 89.242672][ T8326] loop5: detected capacity change from 0 to 512 [ 89.250257][ T8325] ip_vti0: entered promiscuous mode [ 89.256392][ T3297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.259304][ T8325] vlan2: entered promiscuous mode [ 89.281376][ T8325] ip_vti0: left promiscuous mode [ 89.332031][ T8326] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.443950][ T8344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1793'. [ 89.457269][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 89.468866][ T8340] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.477655][ T8340] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.486359][ T8340] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.495157][ T8340] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.503997][ T8340] vxlan0: entered promiscuous mode [ 89.509120][ T8340] vxlan0: entered allmulticast mode [ 89.569025][ T8350] loop5: detected capacity change from 0 to 8192 [ 89.698003][ T8359] loop6: detected capacity change from 0 to 2048 [ 89.757988][ T7527] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.844550][ T8378] ip_vti0: entered promiscuous mode [ 89.849929][ T8378] vlan2: entered promiscuous mode [ 89.860094][ T8378] ip_vti0: left promiscuous mode [ 89.916830][ T8382] loop6: detected capacity change from 0 to 512 [ 89.946738][ T8382] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.025443][ T8392] loop2: detected capacity change from 0 to 8192 [ 90.068131][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1810'. [ 90.085614][ T8394] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.094545][ T8394] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.103241][ T8394] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.112024][ T8394] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.124264][ T8394] vxlan0: entered promiscuous mode [ 90.129411][ T8394] vxlan0: entered allmulticast mode [ 90.485878][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1834'. [ 90.497113][ T8445] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.505883][ T8445] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.514637][ T8445] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.523344][ T8445] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.559746][ T8445] vxlan0: entered promiscuous mode [ 90.564966][ T8445] vxlan0: entered allmulticast mode [ 90.642560][ T8460] loop2: detected capacity change from 0 to 1024 [ 90.680795][ T8460] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1851: Failed to acquire dquot type 0 [ 90.743017][ T8460] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 90.791545][ T8460] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1851: corrupted inode contents [ 90.819092][ T8460] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.1851: mark_inode_dirty error [ 90.872232][ T8460] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1851: corrupted inode contents [ 90.899946][ T8460] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.1851: mark_inode_dirty error [ 90.930146][ T8460] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1851: corrupted inode contents [ 90.995767][ T8460] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 91.014940][ T8460] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1851: corrupted inode contents [ 91.053333][ T8460] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.1851: mark_inode_dirty error [ 91.067170][ T8460] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 91.076785][ T8460] EXT4-fs (loop2): 1 truncate cleaned up [ 91.130762][ T8500] __nla_validate_parse: 1 callbacks suppressed [ 91.130853][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 91.187396][ T8522] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 91.215213][ T8522] IPVS: Error joining to the multicast group [ 91.343180][ T8548] loop3: detected capacity change from 0 to 512 [ 91.401956][ T8548] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.481342][ T8561] uprobe: syz.0.1871:8561 failed to unregister, leaking uprobe [ 91.567447][ T8577] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 91.575812][ T8577] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 91.628885][ T8584] bpf_get_probe_write_proto: 2 callbacks suppressed [ 91.628902][ T8584] syz.0.1881[8584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.635756][ T8584] syz.0.1881[8584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.647458][ T8584] syz.0.1881[8584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.572152][ T8592] loop3: detected capacity change from 0 to 256 [ 94.589932][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 94.590018][ T29] audit: type=1400 audit(1734891686.259:3325): avc: denied { watch watch_reads } for pid=8589 comm="syz.5.1885" path="/192" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.636349][ T8596] loop5: detected capacity change from 0 to 512 [ 94.654925][ T29] audit: type=1400 audit(1734891686.309:3326): avc: denied { read } for pid=8587 comm="syz.2.1883" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.664205][ T8596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.678142][ T29] audit: type=1400 audit(1734891686.309:3327): avc: denied { open } for pid=8587 comm="syz.2.1883" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.716376][ T29] audit: type=1400 audit(1734891686.339:3328): avc: denied { mount } for pid=8585 comm="syz.3.1884" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 94.742403][ T8596] EXT4-fs (loop5): 1 truncate cleaned up [ 94.749568][ T29] audit: type=1400 audit(1734891686.419:3329): avc: denied { create } for pid=8585 comm="syz.3.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.769191][ T29] audit: type=1400 audit(1734891686.419:3330): avc: denied { setopt } for pid=8585 comm="syz.3.1884" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.789551][ T29] audit: type=1400 audit(1734891686.419:3331): avc: denied { connect } for pid=8585 comm="syz.3.1884" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.810043][ T29] audit: type=1400 audit(1734891686.419:3332): avc: denied { write } for pid=8585 comm="syz.3.1884" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.834372][ T29] audit: type=1400 audit(1734891686.429:3333): avc: denied { unmount } for pid=7489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 94.855184][ T29] audit: type=1400 audit(1734891686.449:3334): avc: denied { execmem } for pid=8595 comm="syz.5.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.973339][ T8616] loop2: detected capacity change from 0 to 512 [ 94.992679][ T8616] EXT4-fs: Ignoring removed i_version option [ 95.014150][ T8616] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002] [ 95.033020][ T8616] System zones: 0-2, 18-18, 34-35 [ 95.067897][ T8624] loop6: detected capacity change from 0 to 2048 [ 95.075924][ T8616] EXT4-fs mount: 14 callbacks suppressed [ 95.075938][ T8616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.097815][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1900'. [ 95.107224][ T8616] ext4 filesystem being mounted at /375/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.191542][ T8616] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.231085][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.403620][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1911'. [ 95.418314][ T8658] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 95.630289][ T8695] loop5: detected capacity change from 0 to 512 [ 95.673574][ T8695] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1930: casefold flag without casefold feature [ 95.696477][ T8695] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1930: couldn't read orphan inode 15 (err -117) [ 95.709259][ T8695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.733427][ T8609] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.771655][ T8712] pimreg: entered allmulticast mode [ 95.777564][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.778234][ T8712] pimreg: left allmulticast mode [ 95.843264][ T8718] netlink: 'syz.5.1939': attribute type 1 has an invalid length. [ 95.927148][ T8722] loop5: detected capacity change from 0 to 8192 [ 95.942014][ T8722] syz.5.1941: attempt to access beyond end of device [ 95.942014][ T8722] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 95.963798][ T8722] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 95.971858][ T8722] FAT-fs (loop5): Filesystem has been set read-only [ 95.986786][ T8722] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 96.000802][ T8722] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 96.061004][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 96.073191][ T8744] bridge0: entered promiscuous mode [ 96.078749][ T8744] macsec1: entered promiscuous mode [ 96.086065][ T8744] bridge0: left promiscuous mode [ 96.161795][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 96.188159][ T3376] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 96.195622][ T3376] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 96.207151][ T3376] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.252744][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1959'. [ 96.309810][ T8769] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 96.486664][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 96.500588][ T8795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1977'. [ 96.515907][ T8795] 1ªX¹¦À: renamed from 60ªX¹¦À [ 96.523829][ T8795] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 96.554644][ T8801] rdma_op ffff8881034c9980 conn xmit_rdma 0000000000000000 [ 96.627752][ T8812] syz.0.1984[8812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.627839][ T8812] syz.0.1984[8812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.641872][ T8812] syz.0.1984[8812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.666721][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1986'. [ 96.687090][ T8815] tipc: Started in network mode [ 96.691981][ T8815] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 96.706872][ T8815] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 96.715291][ T8815] tipc: Enabled bearer , priority 10 [ 96.996640][ T8853] loop5: detected capacity change from 0 to 1024 [ 97.016144][ T8857] syz.2.2006[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.016211][ T8857] syz.2.2006[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.023501][ T8853] EXT4-fs: Ignoring removed nobh option [ 97.062656][ T8857] syz.2.2006[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.064647][ T8853] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.118745][ T8853] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #11: comm syz.5.2004: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 97.144714][ T8853] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2004: couldn't read orphan inode 11 (err -117) [ 97.161721][ T8853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.193792][ T8871] IPv6: Can't replace route, no match found [ 97.204966][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.277407][ T8885] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 97.280866][ T8877] smc: net device bond0 applied user defined pnetid SYZ0 [ 97.299064][ T8877] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2016'. [ 97.311128][ T8877] smc: net device bond0 erased user defined pnetid SYZ0 [ 97.341326][ T8891] loop6: detected capacity change from 0 to 1024 [ 97.348272][ T8891] EXT4-fs: Ignoring removed orlov option [ 97.353935][ T8891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.378147][ T8891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.421674][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.697937][ T8930] Falling back ldisc for ttyS3. [ 97.835585][ T35] tipc: Node number set to 1 [ 97.843609][ T8954] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2051'. [ 97.918644][ T8970] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2057'. [ 97.951920][ T8976] syz.5.2061[8976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.952006][ T8976] syz.5.2061[8976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.971256][ T8976] syz.5.2061[8976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.983437][ T8974] netlink: 'syz.0.2060': attribute type 2 has an invalid length. [ 98.002647][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 98.034346][ T8980] syz.2.2062[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.034411][ T8980] syz.2.2062[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.046036][ T8980] syz.2.2062[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.065919][ T8980] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 98.092507][ T8982] bond1: entered promiscuous mode [ 98.097639][ T8982] bond1: entered allmulticast mode [ 98.140909][ T8982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.194856][ T8982] bond1 (unregistering): Released all slaves [ 98.272716][ T9010] loop3: detected capacity change from 0 to 512 [ 98.306861][ T9010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.352619][ T9010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.367981][ T9010] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.404222][ T7489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.498065][ T9042] dvmrp0: entered allmulticast mode [ 98.499404][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.513074][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.575626][ T9055] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2095'. [ 98.850308][ T9082] wireguard0: entered promiscuous mode [ 98.856769][ T9082] wireguard0: entered allmulticast mode [ 98.943628][ T9097] loop5: detected capacity change from 0 to 128 [ 99.006768][ T69] kworker/u8:4: attempt to access beyond end of device [ 99.006768][ T69] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 99.292010][ T9145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 99.298555][ T9145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.306258][ T9145] vhci_hcd vhci_hcd.0: Device attached [ 99.319366][ T9146] vhci_hcd: connection closed [ 99.319490][ T11] vhci_hcd: stop threads [ 99.328505][ T11] vhci_hcd: release socket [ 99.332921][ T11] vhci_hcd: disconnect device [ 99.368627][ T9155] veth0_vlan: entered allmulticast mode [ 99.407292][ T11] infiniband syz!: set active [ 99.412832][ T9155] veth0_vlan: left promiscuous mode [ 99.419771][ T9155] veth0_vlan: entered promiscuous mode [ 99.451100][ T11] infiniband syz!: set active [ 99.511332][ T9171] loop5: detected capacity change from 0 to 512 [ 99.545724][ T9171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.559536][ T9171] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.588205][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.640992][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 99.641006][ T29] audit: type=1400 audit(1734891691.319:3715): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 99.729037][ T29] audit: type=1400 audit(1734891691.409:3716): avc: denied { ioctl } for pid=9195 comm="syz.5.2155" path="socket:[23588]" dev="sockfs" ino=23588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.781236][ T29] audit: type=1400 audit(1734891691.459:3717): avc: denied { connect } for pid=9197 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.858519][ T3377] kernel write not supported for file /vcsa (pid: 3377 comm: kworker/1:5) [ 99.920587][ T29] audit: type=1400 audit(1734891691.599:3718): avc: denied { connect } for pid=9208 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.940356][ T29] audit: type=1400 audit(1734891691.599:3719): avc: denied { name_connect } for pid=9208 comm="syz.3.2160" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 99.981655][ T29] audit: type=1400 audit(1734891691.659:3720): avc: denied { watch watch_reads } for pid=9212 comm="syz.2.2163" path="/proc/930" dev="proc" ino=23630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 100.005301][ T29] audit: type=1400 audit(1734891691.659:3721): avc: denied { write } for pid=9208 comm="syz.3.2160" laddr=fe80::f lport=58274 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.032035][ T9223] netlink: 'syz.6.2164': attribute type 18 has an invalid length. [ 100.363721][ T29] audit: type=1400 audit(1734891692.039:3722): avc: denied { bind } for pid=9241 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.383366][ T29] audit: type=1400 audit(1734891692.039:3723): avc: denied { name_bind } for pid=9241 comm="syz.0.2175" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.405368][ T29] audit: type=1400 audit(1734891692.039:3724): avc: denied { node_bind } for pid=9241 comm="syz.0.2175" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 100.472066][ T9249] geneve0: entered allmulticast mode [ 100.630910][ T9258] bridge0: port 3(vlan2) entered blocking state [ 100.637222][ T9258] bridge0: port 3(vlan2) entered disabled state [ 100.643608][ T9258] vlan2: entered allmulticast mode [ 100.649839][ T9258] vlan2: left allmulticast mode [ 100.914431][ T9280] loop5: detected capacity change from 0 to 8192 [ 100.941092][ T9280] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 100.949958][ T9280] FAT-fs (loop5): Filesystem has been set read-only [ 100.960724][ T9280] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 100.976940][ T9280] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 100.985890][ T9280] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.001887][ T9280] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.019681][ T9288] loop6: detected capacity change from 0 to 512 [ 101.071135][ T9288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 101.079912][ T9288] System zones: 0-2, 18-18, 34-34 [ 101.088487][ T9288] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2196: bg 0: block 248: padding at end of block bitmap is not set [ 101.104596][ T9288] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2196: Failed to acquire dquot type 1 [ 101.152145][ T9288] EXT4-fs (loop6): 1 truncate cleaned up [ 101.158386][ T9296] pim6reg: entered allmulticast mode [ 101.158412][ T9288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.165949][ T9296] pim6reg: left allmulticast mode [ 101.177091][ T9288] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.237956][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.262730][ T9311] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 101.393843][ T9320] loop3: detected capacity change from 0 to 8192 [ 101.442568][ T9320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.451472][ T9320] FAT-fs (loop3): Filesystem has been set read-only [ 101.463776][ T9331] loop5: detected capacity change from 0 to 512 [ 101.472317][ T9320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.484759][ T9320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.494563][ T9331] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 101.501070][ T9320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.512512][ T9331] System zones: 0-2, 18-18, 34-34 [ 101.522485][ T9338] loop0: detected capacity change from 0 to 512 [ 101.530105][ T9320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.542688][ T9331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2215: bg 0: block 248: padding at end of block bitmap is not set [ 101.577449][ T9331] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2215: Failed to acquire dquot type 1 [ 101.589556][ T9331] EXT4-fs (loop5): 1 truncate cleaned up [ 101.597912][ T9331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.610739][ T9331] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.650077][ T9338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.667820][ T9338] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.684028][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.778880][ T7665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.877000][ T9370] rdma_op ffff888116be0180 conn xmit_rdma 0000000000000000 [ 101.999974][ T9381] loop0: detected capacity change from 0 to 512 [ 102.028374][ T9381] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 102.030625][ T9385] loop5: detected capacity change from 0 to 2048 [ 102.045880][ T9381] System zones: 0-2, 18-18, 34-34 [ 102.051790][ T9384] capability: warning: `syz.6.2238' uses deprecated v2 capabilities in a way that may be insecure [ 102.056239][ T9381] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2235: bg 0: block 248: padding at end of block bitmap is not set [ 102.078364][ T9381] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2235: Failed to acquire dquot type 1 [ 102.091590][ T9381] EXT4-fs (loop0): 1 truncate cleaned up [ 102.098418][ T9385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.111980][ T9381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.127226][ T9381] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.140176][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.175891][ T9396] __nla_validate_parse: 3 callbacks suppressed [ 102.175914][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2242'. [ 102.192992][ T7665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.195169][ T9396] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.250515][ T9399] loop6: detected capacity change from 0 to 8192 [ 102.258550][ T9399] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615' [ 102.309807][ T9407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9407 comm=syz.5.2247 [ 102.322327][ T9407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9407 comm=syz.5.2247 [ 102.426602][ T9418] syzkaller0: entered allmulticast mode [ 102.434842][ T9418] syzkaller0 (unregistering): left allmulticast mode [ 102.499259][ T9425] loop3: detected capacity change from 0 to 512 [ 102.514339][ T9427] loop6: detected capacity change from 0 to 164 [ 102.523528][ T9425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 102.537507][ T9425] System zones: 0-2, 18-18, 34-34 [ 102.544341][ T9425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2255: bg 0: block 248: padding at end of block bitmap is not set [ 102.565181][ T9427] syz.6.2257: attempt to access beyond end of device [ 102.565181][ T9427] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.579713][ T9425] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2255: Failed to acquire dquot type 1 [ 102.591099][ T9427] syz.6.2257: attempt to access beyond end of device [ 102.591099][ T9427] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.606462][ T9425] EXT4-fs (loop3): 1 truncate cleaned up [ 102.612571][ T9425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.625351][ T9425] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.651290][ T9437] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 102.699883][ T7489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.773655][ T9452] loop6: detected capacity change from 0 to 512 [ 102.807133][ T9452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 102.815630][ T9452] System zones: 0-2, 18-18, 34-34 [ 102.824098][ T9452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2276: bg 0: block 248: padding at end of block bitmap is not set [ 102.874599][ T9452] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2276: Failed to acquire dquot type 1 [ 102.878373][ T9459] loop2: detected capacity change from 0 to 128 [ 102.904289][ T9452] EXT4-fs (loop6): 1 truncate cleaned up [ 102.921523][ T9452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.946524][ T9452] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.019316][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.220939][ T9485] sctp: [Deprecated]: syz.2.2279 (pid 9485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.220939][ T9485] Use struct sctp_sack_info instead [ 103.326660][ T9493] loop0: detected capacity change from 0 to 512 [ 103.352483][ T9499] loop6: detected capacity change from 0 to 128 [ 103.357413][ T9493] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.360591][ T9499] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 103.375868][ T9493] System zones: 0-2, 18-18, 34-34 [ 103.377402][ T9499] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 103.382261][ T9493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2284: bg 0: block 248: padding at end of block bitmap is not set [ 103.398754][ T9499] EXT4-fs error (device loop6): __ext4_find_entry:1652: inode #2: comm syz.6.2286: checksumming directory block 0 [ 103.410052][ T9493] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2284: Failed to acquire dquot type 1 [ 103.432126][ T9493] EXT4-fs (loop0): 1 truncate cleaned up [ 103.438137][ T9493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.450826][ T9493] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.451084][ T7527] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.500708][ T7665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.710636][ T9528] loop0: detected capacity change from 0 to 512 [ 103.712117][ T9530] loop6: detected capacity change from 0 to 1024 [ 103.735932][ T9528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.736390][ T9530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.744052][ T9528] System zones: 0-2, 18-18, 34-34 [ 103.763412][ T9528] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2299: bg 0: block 248: padding at end of block bitmap is not set [ 103.765950][ T9530] capability: warning: `syz.6.2300' uses 32-bit capabilities (legacy support in use) [ 103.781100][ T9528] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2299: Failed to acquire dquot type 1 [ 103.800162][ T9528] EXT4-fs (loop0): 1 truncate cleaned up [ 103.806766][ T9528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.822968][ T9528] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.838291][ T9538] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2301'. [ 103.864458][ T9530] Falling back ldisc for ttyS3. [ 103.889170][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.920393][ T7665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.977913][ T9557] 9pnet: p9_errstr2errno: server reported unknown error œæçæ [ 104.210701][ T9596] loop0: detected capacity change from 0 to 512 [ 104.232354][ T9593] blackhole_netdev_xmit(): Dropping skb. [ 104.260652][ T9596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 104.268767][ T9596] System zones: 0-2, 18-18, 34-34 [ 104.276295][ T9596] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2315: bg 0: block 248: padding at end of block bitmap is not set [ 104.302138][ T9596] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2315: Failed to acquire dquot type 1 [ 104.315515][ T9596] EXT4-fs (loop0): 1 truncate cleaned up [ 104.320183][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2318'. [ 104.321538][ T9596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.346798][ T9596] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.426012][ T7665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.448332][ T9619] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 104.599200][ T9641] loop0: detected capacity change from 0 to 512 [ 104.616028][ T9641] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.625227][ T9641] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 104.650632][ T9641] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 104.650736][ T9641] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 104.650796][ T9641] System zones: 0-2, 18-18, 34-34 [ 104.651090][ T9641] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.651474][ T9641] EXT4-fs (loop0): 1 truncate cleaned up [ 104.651833][ T9641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.651985][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 104.651995][ T29] audit: type=1400 audit(1734891696.329:4139): avc: denied { mount } for pid=9640 comm="syz.0.2334" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.653104][ T29] audit: type=1400 audit(1734891696.329:4140): avc: denied { write } for pid=9640 comm="syz.0.2334" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.653247][ T29] audit: type=1400 audit(1734891696.329:4141): avc: denied { add_name } for pid=9640 comm="syz.0.2334" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.653401][ T29] audit: type=1400 audit(1734891696.329:4142): avc: denied { create } for pid=9640 comm="syz.0.2334" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.654137][ T29] audit: type=1400 audit(1734891696.329:4143): avc: denied { read write } for pid=9640 comm="syz.0.2334" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.654372][ T29] audit: type=1400 audit(1734891696.339:4144): avc: denied { open } for pid=9640 comm="syz.0.2334" path="/157/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.655761][ T29] audit: type=1400 audit(1734891696.339:4145): avc: denied { append } for pid=9640 comm="syz.0.2334" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.718357][ T29] audit: type=1400 audit(1734891696.399:4146): avc: denied { write } for pid=9644 comm="syz.5.2335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 104.772721][ T7665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.782818][ T29] audit: type=1400 audit(1734891696.449:4147): avc: denied { read } for pid=9649 comm="syz.2.2336" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.921675][ T29] audit: type=1400 audit(1734891696.449:4148): avc: denied { open } for pid=9649 comm="syz.2.2336" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.473407][ T9704] loop3: detected capacity change from 0 to 512 [ 105.480049][ T9704] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.588825][ T9719] loop2: detected capacity change from 0 to 2048 [ 105.603606][ T9723] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 105.612507][ T9723] SELinux: failed to load policy [ 105.625104][ T9719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.639128][ T9719] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 105.667035][ T3297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 105.670154][ T9729] veth0_virt_wifi: entered promiscuous mode [ 105.692913][ T9729] veth0_virt_wifi: left promiscuous mode [ 105.701025][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.735255][ T9735] loop2: detected capacity change from 0 to 128 [ 105.751584][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2369'. [ 105.762205][ T9735] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.777355][ T9735] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.830993][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.867201][ T9744] loop3: detected capacity change from 0 to 2048 [ 105.879270][ T9742] bridge0: port 3(vlan2) entered blocking state [ 105.885674][ T9742] bridge0: port 3(vlan2) entered disabled state [ 105.893466][ T9742] vlan2: entered allmulticast mode [ 105.904422][ T9742] vlan2: left allmulticast mode [ 105.910833][ T9744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.935019][ T7489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.958566][ T9752] netlink: 'syz.3.2376': attribute type 298 has an invalid length. [ 106.075705][ T9769] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2384'. [ 106.215839][ T9785] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2392'. [ 106.293059][ T9797] loop0: detected capacity change from 0 to 128 [ 106.299725][ T9797] EXT4-fs: Ignoring removed nobh option [ 106.308874][ T9797] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.321416][ T9797] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.345109][ T7665] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.381989][ T9805] ip6gre1: entered allmulticast mode [ 106.428065][ T9809] tipc: Started in network mode [ 106.433005][ T9809] tipc: Node identity ac14140f, cluster identity 4711 [ 106.441252][ T9809] tipc: New replicast peer: 255.255.255.255 [ 106.447439][ T9809] tipc: Enabled bearer , priority 10 [ 106.458560][ T9811] netlink: 'syz.0.2404': attribute type 6 has an invalid length. [ 106.753790][ T9836] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.771949][ T9836] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 106.836197][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 107.330263][ T3376] IPVS: starting estimator thread 0... [ 107.400644][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 107.420613][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 107.424232][ T9920] IPVS: using max 3216 ests per chain, 160800 per kthread [ 107.454140][ T3358] tipc: Node number set to 2886997007 [ 107.573378][ T9943] loop3: detected capacity change from 0 to 512 [ 107.601749][ T9945] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 107.612420][ T9943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.626184][ T9943] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.656164][ T7489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.240694][ T9995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2485'. [ 108.416437][T10015] loop5: detected capacity change from 0 to 164 [ 108.422819][T10010] netlink: 'syz.6.2491': attribute type 5 has an invalid length. [ 108.432327][T10015] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 108.515581][T10025] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2492'. [ 108.554614][T10024] bond1: entered promiscuous mode [ 108.559744][T10024] bond1: entered allmulticast mode [ 108.599012][T10024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.735994][T10044] loop6: detected capacity change from 0 to 512 [ 108.760299][T10044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.785000][T10044] EXT4-fs (loop6): 1 truncate cleaned up [ 108.796428][T10044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.817412][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.829941][T10055] serio: Serial port ptm0 [ 108.887453][ T3000] udevd[3000]: worker [5466] terminated by signal 33 (Unknown signal 33) [ 108.896114][ T3000] udevd[3000]: worker [5466] failed while handling '/devices/virtual/block/loop6' [ 109.178721][T10087] loop0: detected capacity change from 0 to 4096 [ 109.188878][T10087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.222073][T10089] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2524'. [ 109.232390][T10089] 0ªX¹¦À: renamed from caif0 [ 109.250995][T10089] 0ªX¹¦À: entered allmulticast mode [ 109.256356][T10089] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 109.297392][ T9803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.298034][T10099] loop6: detected capacity change from 0 to 1024 [ 109.335412][T10099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.346070][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2531'. [ 109.374929][T10105] bond0: (slave bond_slave_0): Releasing backup interface [ 109.399020][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.598749][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.609286][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.688179][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.698553][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.700177][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 109.700191][ T29] audit: type=1400 audit(1734891701.379:4403): avc: denied { create } for pid=10137 comm="syz.5.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.739270][T10116] chnl_net:caif_netlink_parms(): no params data found [ 109.780330][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.790731][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.822336][T10145] bridge0: port 3(vlan2) entered blocking state [ 109.828721][T10145] bridge0: port 3(vlan2) entered disabled state [ 109.835393][T10145] vlan2: entered allmulticast mode [ 109.841999][T10145] vlan2: left allmulticast mode [ 109.855192][T10116] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.862395][T10116] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.876062][T10116] bridge_slave_0: entered allmulticast mode [ 109.883074][T10116] bridge_slave_0: entered promiscuous mode [ 109.894915][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.905326][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.945730][T10116] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.952817][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.960180][T10116] bridge_slave_1: entered allmulticast mode [ 109.966840][T10116] bridge_slave_1: entered promiscuous mode [ 109.993248][T10159] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 109.993641][ T29] audit: type=1400 audit(1734891701.669:4404): avc: denied { relabelfrom } for pid=10158 comm="syz.3.2551" name="TCPv6" dev="sockfs" ino=25186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 110.025350][ T29] audit: type=1400 audit(1734891701.669:4405): avc: denied { mac_admin } for pid=10158 comm="syz.3.2551" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.048937][T10116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.058315][ T29] audit: type=1400 audit(1734891701.689:4406): avc: denied { relabelto } for pid=10158 comm="syz.3.2551" name="TCPv6" dev="sockfs" ino=25186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:fonts_t:s0" [ 110.086835][T10116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.096314][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2552'. [ 110.117032][T10116] team0: Port device team_slave_0 added [ 110.127433][T10116] team0: Port device team_slave_1 added [ 110.152377][T10116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.159513][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.185432][T10116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.198037][T10116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.205023][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.231427][T10116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.241095][ T29] audit: type=1400 audit(1734891701.909:4407): avc: denied { setopt } for pid=10164 comm="syz.3.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.261882][ T28] bridge_slave_1: left allmulticast mode [ 110.267593][ T28] bridge_slave_1: left promiscuous mode [ 110.271699][ T29] audit: type=1400 audit(1734891701.919:4408): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.273227][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.294466][ T29] audit: type=1400 audit(1734891701.919:4409): avc: denied { read } for pid=3038 comm="dhcpcd" name="n68" dev="tmpfs" ino=11252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.323170][ T29] audit: type=1400 audit(1734891701.919:4410): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=11252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.346299][ T29] audit: type=1400 audit(1734891701.919:4411): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=11252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.371336][ T28] bridge_slave_0: left allmulticast mode [ 110.377289][ T28] bridge_slave_0: left promiscuous mode [ 110.382946][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.486701][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.496537][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.506091][ T28] bond0 (unregistering): Released all slaves [ 110.558707][ T29] audit: type=1400 audit(1734891702.239:4412): avc: denied { read } for pid=10176 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.587941][T10116] hsr_slave_0: entered promiscuous mode [ 110.596895][T10116] hsr_slave_1: entered promiscuous mode [ 110.603331][T10116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.619824][T10116] Cannot create hsr debugfs directory [ 110.675361][ T28] hsr_slave_0: left promiscuous mode [ 110.682467][ T28] hsr_slave_1: left promiscuous mode [ 110.694879][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.702574][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.719060][T10196] IPv4: Oversized IP packet from 127.202.26.0 [ 110.727050][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.734669][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.743894][ T28] veth1_macvtap: left promiscuous mode [ 110.749522][ T28] veth0_macvtap: left promiscuous mode [ 110.755094][ T28] veth1_vlan: left promiscuous mode [ 110.760384][ T28] veth0_vlan: left promiscuous mode [ 110.821952][ T28] team0 (unregistering): Port device team_slave_1 removed [ 110.831707][ T28] team0 (unregistering): Port device team_slave_0 removed [ 110.875516][T10204] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2565'. [ 110.947686][T10116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.957018][T10116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.966197][T10116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.984804][T10116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.073490][T10116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.104703][T10230] program syz.2.2570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.116378][T10116] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.146366][T10116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.156830][T10116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.201117][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.208263][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.219402][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.226565][ T2507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.226719][T10240] loop3: detected capacity change from 0 to 2048 [ 111.257576][T10240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.335430][T10259] loop2: detected capacity change from 0 to 512 [ 111.337487][T10116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.367319][T10259] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 111.470545][T10259] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 111.491706][T10259] EXT4-fs (loop2): 1 truncate cleaned up [ 111.497786][T10259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.512652][ T7489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.571517][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.597919][T10293] loop5: detected capacity change from 0 to 512 [ 111.623079][T10293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.678156][T10293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.699725][T10293] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.730675][T10311] loop2: detected capacity change from 0 to 512 [ 111.768592][T10116] veth0_vlan: entered promiscuous mode [ 111.785211][T10116] veth1_vlan: entered promiscuous mode [ 111.811763][T10311] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.834020][T10116] veth0_macvtap: entered promiscuous mode [ 111.841637][T10116] veth1_macvtap: entered promiscuous mode [ 111.851021][ T3297] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 111.877017][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.887578][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.897569][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.908133][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.918022][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.928537][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.938468][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.948986][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.958915][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.969397][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.982690][T10116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.982612][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.000059][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.010585][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.020542][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.030994][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.040847][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.051303][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.061130][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.071599][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.081505][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.092003][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.132571][T10336] loop5: detected capacity change from 0 to 256 [ 112.153775][T10336] FAT-fs (loop5): Directory bread(block 64) failed [ 112.154699][T10116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.161295][T10336] FAT-fs (loop5): Directory bread(block 65) failed [ 112.180798][T10116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.189753][T10116] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.198581][T10116] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.207323][T10116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.218278][T10336] FAT-fs (loop5): Directory bread(block 66) failed [ 112.225191][T10336] FAT-fs (loop5): Directory bread(block 67) failed [ 112.231894][T10336] FAT-fs (loop5): Directory bread(block 68) failed [ 112.238554][T10336] FAT-fs (loop5): Directory bread(block 69) failed [ 112.247594][T10336] FAT-fs (loop5): Directory bread(block 70) failed [ 112.256967][T10336] FAT-fs (loop5): Directory bread(block 71) failed [ 112.264714][T10336] FAT-fs (loop5): Directory bread(block 72) failed [ 112.271239][T10336] FAT-fs (loop5): Directory bread(block 73) failed [ 112.437668][T10364] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 112.752572][T10395] random: crng reseeded on system resumption [ 113.061346][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.061346][ T50] loop5: rw=1, sector=1224, nr_sectors = 320 limit=256 [ 113.090881][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.090881][ T50] loop5: rw=1, sector=1576, nr_sectors = 256 limit=256 [ 113.132637][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.132637][ T50] loop5: rw=1, sector=1864, nr_sectors = 9944 limit=256 [ 113.160254][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.160254][ T50] loop5: rw=1, sector=11808, nr_sectors = 2048 limit=256 [ 113.206169][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.206169][ T50] loop5: rw=1, sector=13856, nr_sectors = 2064 limit=256 [ 113.219617][T10450] loop2: detected capacity change from 0 to 1024 [ 113.237375][T10450] EXT4-fs: Ignoring removed orlov option [ 113.243144][T10450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.253924][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.253924][ T50] loop5: rw=1, sector=15920, nr_sectors = 2192 limit=256 [ 113.301269][T10450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.315461][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.315461][ T50] loop5: rw=1, sector=18112, nr_sectors = 2176 limit=256 [ 113.341150][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.341150][ T50] loop5: rw=1, sector=20288, nr_sectors = 2080 limit=256 [ 113.356056][T10463] cgroup: fork rejected by pids controller in /syz3 [ 113.358072][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.358072][ T50] loop5: rw=1, sector=22368, nr_sectors = 2112 limit=256 [ 113.381102][ T50] kworker/u8:3: attempt to access beyond end of device [ 113.381102][ T50] loop5: rw=1, sector=24480, nr_sectors = 2128 limit=256 [ 113.431425][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.455873][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'. [ 113.505480][T10471] loop5: detected capacity change from 0 to 512 [ 113.538917][T10475] netlink: 'syz.2.2624': attribute type 3 has an invalid length. [ 113.560727][T10471] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.577782][T10482] loop2: detected capacity change from 0 to 512 [ 113.627415][T10471] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2615: bg 0: block 248: padding at end of block bitmap is not set [ 113.642034][T10471] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2615: Failed to acquire dquot type 1 [ 113.655517][T10471] EXT4-fs (loop5): 1 truncate cleaned up [ 113.688966][T10482] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.720096][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.730459][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.743816][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2634'. [ 113.767098][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.777584][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.818162][T10510] loop6: detected capacity change from 0 to 128 [ 113.828836][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2637'. [ 113.901681][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.912148][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.965226][T10510] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.052320][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.059873][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.067360][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.074797][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.082422][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.089891][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.097367][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.104810][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.112213][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.119644][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.127097][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.134666][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.142053][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.149454][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.156878][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.164308][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.171681][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.179079][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.186471][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.193872][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.201304][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.208792][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.216286][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.223751][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.231260][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.238740][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.246129][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.253507][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.260896][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.268345][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.275741][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.283152][ T3377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 114.362759][ T3377] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.450996][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.461398][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.625531][ T50] bridge_slave_1: left allmulticast mode [ 114.631228][ T50] bridge_slave_1: left promiscuous mode [ 114.636915][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.655586][ T50] bridge_slave_0: left allmulticast mode [ 114.661244][ T50] bridge_slave_0: left promiscuous mode [ 114.667069][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.722279][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 114.722292][ T29] audit: type=1326 audit(1734891706.399:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.795132][ T29] audit: type=1326 audit(1734891706.439:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.818240][ T29] audit: type=1326 audit(1734891706.439:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.841293][ T29] audit: type=1326 audit(1734891706.439:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.864332][ T29] audit: type=1326 audit(1734891706.439:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.887580][ T29] audit: type=1326 audit(1734891706.439:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.910595][ T29] audit: type=1326 audit(1734891706.439:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 114.933550][ T29] audit: type=1326 audit(1734891706.439:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 115.053978][T10556] loop2: detected capacity change from 0 to 512 [ 115.074612][T10556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.089159][T10557] ref_ctr_offset mismatch. inode: 0x43 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 115.119165][ T50] dvmrp0 (unregistering): left allmulticast mode [ 115.142737][T10558] ref_ctr_offset mismatch. inode: 0x4aa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 115.175493][T10556] EXT4-fs (loop2): 1 truncate cleaned up [ 115.218069][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.258818][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.270847][ T29] audit: type=1400 audit(1734891706.929:4528): avc: denied { create } for pid=10565 comm="syz.2.2650" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.291769][ T29] audit: type=1400 audit(1734891706.929:4529): avc: denied { write } for pid=10565 comm="syz.2.2650" name="file0" dev="tmpfs" ino=2731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.321002][ T50] bond0 (unregistering): Released all slaves [ 115.378025][ T50] tipc: Disabling bearer [ 115.383369][ T50] tipc: Left network mode [ 115.548698][T10490] chnl_net:caif_netlink_parms(): no params data found [ 115.556590][T10576] loop7: detected capacity change from 0 to 512 [ 115.562977][T10572] loop2: detected capacity change from 0 to 2048 [ 115.598602][T10576] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.656324][ T50] hsr_slave_0: left promiscuous mode [ 115.700849][ T50] hsr_slave_1: left promiscuous mode [ 115.720950][T10576] EXT4-fs (loop7): 1 truncate cleaned up [ 115.740267][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.747722][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.814517][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.822068][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.914542][ T50] veth1_macvtap: left promiscuous mode [ 115.920133][ T50] veth0_macvtap: left promiscuous mode [ 115.925643][ T50] veth1_vlan: left promiscuous mode [ 115.930867][ T50] veth0_vlan: left promiscuous mode [ 115.964199][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2658'. [ 115.983979][T10599] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2657'. [ 116.349661][ T50] team0 (unregistering): Port device team_slave_1 removed [ 116.371285][ T50] team0 (unregistering): Port device team_slave_0 removed [ 116.503027][T10606] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2660'. [ 116.646307][T10619] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2664'. [ 116.720992][T10630] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10630 comm=syz.6.2668 [ 116.762490][T10625] syzkaller0: entered promiscuous mode [ 116.768108][T10625] syzkaller0: entered allmulticast mode [ 116.818171][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.825323][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.894253][T10490] bridge_slave_0: entered allmulticast mode [ 116.922791][T10490] bridge_slave_0: entered promiscuous mode [ 119.374116][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.381209][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.407308][T10490] bridge_slave_1: entered allmulticast mode [ 119.442018][T10490] bridge_slave_1: entered promiscuous mode [ 119.683973][T10682] smc: net device bond0 applied user defined pnetid SYZ0 [ 119.692519][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.715294][ T50] IPVS: stop unused estimator thread 0... [ 119.722356][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.806820][T10683] smc: net device bond0 erased user defined pnetid SYZ0 [ 119.857451][T10490] team0: Port device team_slave_0 added [ 119.882337][T10490] team0: Port device team_slave_1 added [ 119.926923][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.933923][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.959922][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.979628][T10694] loop5: detected capacity change from 0 to 1024 [ 120.064044][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.071165][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.097112][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.182235][T10694] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 120.219720][T10694] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 120.233077][T10694] EXT4-fs (loop5): This should not happen!! Data will be lost [ 120.233077][T10694] [ 120.242807][T10694] EXT4-fs (loop5): Total free blocks count 0 [ 120.248874][T10694] EXT4-fs (loop5): Free/Dirty block details [ 120.254901][T10694] EXT4-fs (loop5): free_blocks=68451041280 [ 120.260704][T10694] EXT4-fs (loop5): dirty_blocks=16 [ 120.265910][T10694] EXT4-fs (loop5): Block reservation details [ 120.271902][T10694] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 120.538029][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 120.538043][ T29] audit: type=1326 audit(1734891712.219:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.6.2697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x0 [ 121.047684][ T29] audit: type=1326 audit(1734891712.729:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.100895][ T29] audit: type=1326 audit(1734891712.749:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.124481][ T29] audit: type=1326 audit(1734891712.749:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.147988][ T29] audit: type=1326 audit(1734891712.749:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.171453][ T29] audit: type=1326 audit(1734891712.749:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.194994][ T29] audit: type=1326 audit(1734891712.749:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.218559][ T29] audit: type=1326 audit(1734891712.749:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.2.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.242021][ T29] audit: type=1326 audit(1734891712.769:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.2.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.265835][ T29] audit: type=1326 audit(1734891712.769:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.2.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff540915d29 code=0x7ffc0000 [ 121.492714][T10748] loop6: detected capacity change from 0 to 128 [ 121.511113][T10748] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 121.519038][T10748] FAT-fs (loop6): Filesystem has been set read-only [ 124.334317][T10757] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 124.342513][T10757] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 124.388239][T10490] hsr_slave_0: entered promiscuous mode [ 124.421388][T10490] hsr_slave_1: entered promiscuous mode [ 124.483869][T10769] loop2: detected capacity change from 0 to 256 [ 124.579909][T10776] loop6: detected capacity change from 0 to 512 [ 124.605523][T10776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 124.646350][T10776] EXT4-fs (loop6): 1 truncate cleaned up [ 124.864019][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2722'. [ 134.801204][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 134.801219][ T29] audit: type=1400 audit(1734891726.479:4679): avc: denied { ioctl } for pid=10828 comm="syz.2.2734" path="/dev/input/event3" dev="devtmpfs" ino=256 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 134.845730][T10830] rdma_op ffff888119303d80 conn xmit_rdma 0000000000000000 [ 134.926707][ T29] audit: type=1326 audit(1734891726.599:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce3a95d29 code=0x7ffc0000 [ 134.950276][ T29] audit: type=1326 audit(1734891726.599:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce3a95d29 code=0x7ffc0000 [ 134.973831][ T29] audit: type=1326 audit(1734891726.609:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0ce3a95d29 code=0x7ffc0000 [ 134.997327][ T29] audit: type=1326 audit(1734891726.609:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce3a95d29 code=0x7ffc0000 [ 135.051369][T10838] bpf_get_probe_write_proto: 3 callbacks suppressed [ 135.051412][T10838] syz.2.2737[10838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.073454][T10838] syz.2.2737[10838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.128015][ T29] audit: type=1326 audit(1734891726.799:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 135.163040][ T29] audit: type=1326 audit(1734891726.799:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 135.186665][ T29] audit: type=1326 audit(1734891726.799:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 135.210260][ T29] audit: type=1326 audit(1734891726.799:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 135.233971][ T29] audit: type=1326 audit(1734891726.799:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 135.335779][T10838] syz.2.2737[10838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.400377][T10856] loop6: detected capacity change from 0 to 512 [ 135.556357][T10856] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.2751: casefold flag without casefold feature [ 135.585822][T10856] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2751: couldn't read orphan inode 15 (err -117) [ 135.635492][T10856] EXT4-fs mount: 16 callbacks suppressed [ 135.635516][T10856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.724605][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.001439][T10889] loop7: detected capacity change from 0 to 2048 [ 136.103397][T10891] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 136.250275][T10895] loop2: detected capacity change from 0 to 8192 [ 136.262310][T10895] bio_check_eod: 1 callbacks suppressed [ 136.262326][T10895] syz.2.2749: attempt to access beyond end of device [ 136.262326][T10895] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.296297][T10895] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 136.304188][T10895] FAT-fs (loop2): Filesystem has been set read-only [ 136.311338][T10895] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 136.323796][T10895] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 143.771358][T10918] loop6: detected capacity change from 0 to 128 [ 143.782163][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 143.782212][ T29] audit: type=1326 audit(1734891735.459:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 143.818045][T10490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.855185][T10490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.888670][T10490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.904531][ T29] audit: type=1326 audit(1734891735.509:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 143.928168][ T29] audit: type=1326 audit(1734891735.509:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 143.951815][ T29] audit: type=1326 audit(1734891735.509:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 143.975291][ T29] audit: type=1326 audit(1734891735.509:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 143.998822][ T29] audit: type=1326 audit(1734891735.519:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 144.022299][ T29] audit: type=1326 audit(1734891735.519:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 144.045808][ T29] audit: type=1326 audit(1734891735.519:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 144.069276][ T29] audit: type=1326 audit(1734891735.519:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 144.092751][ T29] audit: type=1326 audit(1734891735.519:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 144.241618][ T11] kworker/u8:0: attempt to access beyond end of device [ 144.241618][ T11] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 144.331224][T10490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.400940][T10944] loop2: detected capacity change from 0 to 512 [ 144.443170][T10944] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.466354][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.495429][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.506765][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.513892][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.535450][T10490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.545993][T10490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.609036][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.623291][T10963] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2766'. [ 144.674476][T10944] EXT4-fs (loop2): 1 truncate cleaned up [ 144.682709][T10944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.725584][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.732749][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.762796][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 144.881362][T10490] veth0_vlan: entered promiscuous mode [ 144.921244][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.933783][T10490] veth1_vlan: entered promiscuous mode [ 144.998855][T10490] veth0_macvtap: entered promiscuous mode [ 145.031647][T10490] veth1_macvtap: entered promiscuous mode [ 145.080015][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.090534][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.100517][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.111013][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.120931][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.131521][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.141402][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.151904][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.161726][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.172248][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.207239][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.223833][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.234449][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.244283][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.254924][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.264818][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.275328][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.285271][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.295704][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.305557][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.316053][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.406107][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.455721][T10490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.464535][T10490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.473223][T10490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.481972][T10490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.363412][T11058] loop2: detected capacity change from 0 to 512 [ 146.395276][T11058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.423508][T11058] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2780: bg 0: block 248: padding at end of block bitmap is not set [ 146.483543][T11058] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2780: Failed to acquire dquot type 1 [ 146.496386][T11058] EXT4-fs (loop2): 1 truncate cleaned up [ 147.396356][T11161] wireguard0: entered promiscuous mode [ 147.401854][T11161] wireguard0: entered allmulticast mode [ 147.496021][T11058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.807361][T11219] veth0_vlan: entered allmulticast mode [ 148.838244][T11220] veth0_vlan: left promiscuous mode [ 148.876973][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.886404][T11220] veth0_vlan: entered promiscuous mode [ 149.168482][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 149.168497][ T29] audit: type=1400 audit(1734891740.849:4787): avc: denied { bind } for pid=11231 comm="syz.3.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.345797][T11244] geneve0: entered allmulticast mode [ 149.527461][T11263] veth0_vlan: entered allmulticast mode [ 149.639413][T11263] veth0_vlan: left promiscuous mode [ 149.661090][T11263] veth0_vlan: entered promiscuous mode [ 150.330470][ T29] audit: type=1400 audit(1734891742.009:4788): avc: denied { listen } for pid=11294 comm="syz.7.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.350224][ T29] audit: type=1400 audit(1734891742.009:4789): avc: denied { accept } for pid=11294 comm="syz.7.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.422699][T11301] syzkaller0: entered allmulticast mode [ 150.449350][ T29] audit: type=1400 audit(1734891742.129:4790): avc: denied { write } for pid=11293 comm="syz.2.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.492976][T11305] syzkaller0 (unregistering): left allmulticast mode [ 150.568076][ T29] audit: type=1400 audit(1734891742.249:4791): avc: denied { create } for pid=11311 comm="syz.7.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.590224][T11310] bridge0: port 3(vlan2) entered blocking state [ 150.596637][T11310] bridge0: port 3(vlan2) entered disabled state [ 150.629691][T11310] vlan2: entered allmulticast mode [ 150.638726][ T29] audit: type=1326 audit(1734891742.289:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.7.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 150.662395][ T29] audit: type=1326 audit(1734891742.289:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.7.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 150.685940][ T29] audit: type=1326 audit(1734891742.289:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.7.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 150.709624][ T29] audit: type=1326 audit(1734891742.289:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.7.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705df5d29 code=0x7ffc0000 [ 150.741429][T11310] vlan2: left allmulticast mode [ 152.458098][T11333] loop5: detected capacity change from 0 to 1024 [ 152.464942][T11335] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2841'. [ 152.521320][T11333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.562468][ T29] audit: type=1400 audit(1734891744.239:4796): avc: denied { mount } for pid=11341 comm="syz.7.2844" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.624262][T11333] Falling back ldisc for ttyS3. [ 152.642917][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.409785][T11365] loop7: detected capacity change from 0 to 128 [ 153.417331][T11365] EXT4-fs: Ignoring removed nobh option [ 153.477589][T11372] loop3: detected capacity change from 0 to 128 [ 153.533094][T11365] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.546952][T11365] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.582770][T11372] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.598351][T11372] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.636341][T10116] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.752788][T11383] loop2: detected capacity change from 0 to 1024 [ 153.909017][T11385] veth0_virt_wifi: entered promiscuous mode [ 153.916968][T10490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.930513][T11385] veth0_virt_wifi: left promiscuous mode [ 153.965824][T11383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.055701][T11394] loop7: detected capacity change from 0 to 512 [ 154.095653][T11394] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.104811][T11394] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 154.113672][T11394] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 154.124019][T11394] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 154.132266][T11394] System zones: 0-2, 18-18, 34-34 [ 154.139543][T11394] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.157311][T11394] EXT4-fs (loop7): 1 truncate cleaned up [ 154.163425][T11394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.234493][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 154.234572][ T29] audit: type=1326 audit(1734891745.919:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.286809][T10116] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.406909][ T29] audit: type=1326 audit(1734891745.949:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.430642][ T29] audit: type=1326 audit(1734891745.949:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.454142][ T29] audit: type=1326 audit(1734891745.949:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.477681][ T29] audit: type=1326 audit(1734891745.949:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.501188][ T29] audit: type=1326 audit(1734891745.949:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.524720][ T29] audit: type=1326 audit(1734891745.949:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.624537][T11413] loop6: detected capacity change from 0 to 128 [ 154.649752][T11413] EXT4-fs: Ignoring removed nobh option [ 154.682693][T11413] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.709512][T11413] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.724605][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2872'. [ 154.791708][ T7527] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.819122][ T29] audit: type=1326 audit(1734891746.499:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.893921][ T29] audit: type=1326 audit(1734891746.529:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 154.917560][ T29] audit: type=1326 audit(1734891746.529:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3da45d29 code=0x7ffc0000 [ 155.125366][T11441] loop6: detected capacity change from 0 to 128 [ 155.136397][T11441] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.156516][T11441] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.212802][ T7527] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.764423][T11383] Falling back ldisc for ttyS3. [ 159.770786][T11444] ip6gre1: entered allmulticast mode [ 159.812658][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.195812][T11477] loop5: detected capacity change from 0 to 128 [ 160.229990][T11477] EXT4-fs: Ignoring removed nobh option [ 160.341675][T11489] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.359246][T11489] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 160.368138][T11477] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.383110][T11477] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.438331][T11488] bond1: entered promiscuous mode [ 160.443385][T11488] bond1: entered allmulticast mode [ 160.449629][T11488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.745051][ T5788] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.766892][T11514] loop6: detected capacity change from 0 to 512 [ 160.798435][T11514] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 160.819630][T11514] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 160.830773][T11514] EXT4-fs (loop6): 1 truncate cleaned up [ 160.839259][T11514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.870512][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.920149][T11523] loop2: detected capacity change from 0 to 512 [ 160.945617][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2891'. [ 160.971877][T11523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.999330][T11523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2897: bg 0: block 248: padding at end of block bitmap is not set [ 161.096793][T11523] __quota_error: 46 callbacks suppressed [ 161.096807][T11523] Quota error (device loop2): write_blk: dquota write failed [ 161.109920][T11523] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 161.119891][T11523] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2897: Failed to acquire dquot type 1 [ 161.182365][T11523] EXT4-fs (loop2): 1 truncate cleaned up [ 161.198824][T11548] loop6: detected capacity change from 0 to 512 [ 161.217743][T11548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.232417][T11548] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.341746][T11555] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 161.525813][T11572] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.533432][T11572] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 161.715854][T11588] bond1: entered promiscuous mode [ 161.720972][T11588] bond1: entered allmulticast mode [ 161.728851][T11588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.824781][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.832210][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.839621][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.847077][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.854476][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.861939][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.869335][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.876736][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.884198][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.891578][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.899007][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.906418][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.913804][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.921203][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.928657][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.936048][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.943471][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.950913][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.958401][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.965812][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.973270][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.980699][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.988116][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 161.995540][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.003008][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.010478][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.017933][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.025324][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.032742][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.040156][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.047566][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.054962][ T1037] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 162.065102][ T1037] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 162.342791][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2911'. [ 163.494199][ C0] ================================================================== [ 163.502291][ C0] BUG: KCSAN: data-race in can_send / can_stat_update [ 163.509050][ C0] [ 163.511349][ C0] read to 0xffff888104f3fbf0 of 8 bytes by interrupt on cpu 1: [ 163.518872][ C0] can_stat_update+0x48f/0x6b0 [ 163.523883][ C0] call_timer_fn+0x3a/0x300 [ 163.528369][ C0] __run_timer_base+0x417/0x640 [ 163.533200][ C0] run_timer_softirq+0x31/0x70 [ 163.537945][ C0] handle_softirqs+0xbf/0x280 [ 163.542606][ C0] __irq_exit_rcu+0x3a/0xc0 [ 163.547095][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 163.552717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.558694][ C0] acpi_safe_halt+0x21/0x30 [ 163.563176][ C0] acpi_idle_do_entry+0x1d/0x30 [ 163.568005][ C0] acpi_idle_enter+0x96/0xb0 [ 163.572577][ C0] cpuidle_enter_state+0xc5/0x260 [ 163.577596][ C0] cpuidle_enter+0x40/0x70 [ 163.581997][ C0] do_idle+0x192/0x230 [ 163.586048][ C0] cpu_startup_entry+0x25/0x30 [ 163.590797][ C0] start_secondary+0x96/0xa0 [ 163.595367][ C0] common_startup_64+0x12c/0x137 [ 163.600288][ C0] [ 163.602596][ C0] read-write to 0xffff888104f3fbf0 of 8 bytes by interrupt on cpu 0: [ 163.610638][ C0] can_send+0x5b6/0x6d0 [ 163.614791][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 163.619468][ C0] can_rcv_filter+0x225/0x4c0 [ 163.624138][ C0] can_receive+0x182/0x1f0 [ 163.628540][ C0] can_rcv+0xe7/0x180 [ 163.632509][ C0] __netif_receive_skb+0x123/0x280 [ 163.637604][ C0] process_backlog+0x22e/0x440 [ 163.642349][ C0] __napi_poll+0x63/0x3c0 [ 163.646659][ C0] net_rx_action+0x3a1/0x7f0 [ 163.651233][ C0] handle_softirqs+0xbf/0x280 [ 163.655898][ C0] run_ksoftirqd+0x1c/0x30 [ 163.660296][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 163.665219][ C0] kthread+0x1d1/0x210 [ 163.669272][ C0] ret_from_fork+0x4b/0x60 [ 163.673669][ C0] ret_from_fork_asm+0x1a/0x30 [ 163.678501][ C0] [ 163.680803][ C0] value changed: 0x0000000000021a20 -> 0x0000000000000000 [ 163.687890][ C0] [ 163.690194][ C0] Reported by Kernel Concurrency Sanitizer on: [ 163.696330][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 163.706918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.716952][ C0] ================================================================== [ 165.884384][T11523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.898336][ T7527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.918575][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.