last executing test programs: 3m40.962170564s ago: executing program 32 (id=684): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="0857724ecd", 0x5}], 0x1) 3m24.430777314s ago: executing program 5 (id=1095): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) open(0x0, 0x14507e, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff000000000900000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff", @ANYRES16=r1], 0x40c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(0xffffffffffffffff, 0x0, 0x0) 3m24.373634135s ago: executing program 5 (id=1097): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 3m24.04816993s ago: executing program 5 (id=1102): r0 = open(0x0, 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x10}}, 0x40044) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="701888694addb081eb9df99c55a44902d35ed4aa76a0a47fbde19a46162d076de28c68bd357e3bbfecb7a912471315c782d3f0d9ebe259ed273ab8c2c88281c11f9a283d8cb3c444ad9841b1dc3c4df528378c203ca87d1614ad544d93821d9840e6b7e9e775b2d38e40a89305b73be23a9978ea16df0630eee1d1a319e46c0c8fbf917e75145d7dadc9c6091c9fa14e19706905d3e1a7a57a050b9fc1d744902a54b1e5e7304903cde6a95d0292fc56930a1e803a4f0bdf28173f7a46f024094fb107cf072f224a22991c3aed20010b08ff917e767a27666527ab43db8c806eb6f4c3ca1d7245df6b668783b35c484f7b5c5a5aa0", @ANYRESHEX, @ANYRES16=r4, @ANYRES16=r5, @ANYRES16=r2, @ANYRESOCT, @ANYRES16, @ANYRES8=r5], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfffffffe, 0xffff5a5c, 0x120, 0x1000, 0xffffffffffffffff, 0x5, '\x00', r2, r6, 0x2, 0xffffffff, 0x1, 0xb}, 0x50) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=r7], 0x1ec}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m23.226539722s ago: executing program 5 (id=1111): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) listen(0xffffffffffffffff, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) 3m22.339318895s ago: executing program 5 (id=1114): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.01736819s ago: executing program 5 (id=1128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000035a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3m21.936173791s ago: executing program 33 (id=1128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000035a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m12.651336837s ago: executing program 6 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x3000002) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) shutdown(0xffffffffffffffff, 0x1) 2m12.116825766s ago: executing program 6 (id=2130): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x20, 0x40000d0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getitimer(0x2, &(0x7f0000000280)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r2, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x2}, 0x40fb, 0x0, 0x4, 0x3, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') getdents(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff04}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) pipe2(&(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000001c0)={0xf, 0x10, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) 2m11.596858993s ago: executing program 6 (id=2135): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xe, 0xff, 0x0, 0x8000000000000000, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x401}, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) signalfd(r0, &(0x7f0000002340), 0x8) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) 2m11.561733124s ago: executing program 6 (id=2138): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r1, &(0x7f0000000040)='\x00', 0x1, 0x100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x5, 0x5, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000200001030000000000000000080000000000000000000000f18c2143f1909b52bf670ead2f26bc48f964af98d1964bc8bacd17639dda8bcce6f3041004f67ff7804273e26672c0afda0c71b9b853381a0c9f000ea995fb5ce20263755a14b9a3954a7ac9e3743fe3e29c538727d4"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000206030000000000000000000000000005000100070000000900020073797a3000000000050005"], 0x30}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r2}, 0x18) io_setup(0xffff, &(0x7f0000001080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, 0x0, &(0x7f00000006c0), 0x8010, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m11.021923792s ago: executing program 6 (id=2147): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5f}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0x10) preadv2(r1, &(0x7f0000001240)=[{&(0x7f0000001400)=""/249, 0xf9}, {&(0x7f0000001340)=""/148, 0x94}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000001ec0)=""/4092, 0xffc}], 0x4, 0x1, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffe000), &(0x7f0000ffe000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0xee00}, 0xc) creat(&(0x7f0000000880)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2m10.760390896s ago: executing program 6 (id=2151): ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1001) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m55.746325973s ago: executing program 34 (id=2151): ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1001) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 17.594937054s ago: executing program 3 (id=3924): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000700)=ANY=[], 0x0) 17.561789794s ago: executing program 3 (id=3929): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300092f00000000000000000000000300060000000e0002000000e000000900000000000000000200"], 0x178}}, 0x0) 17.453305536s ago: executing program 3 (id=3931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 17.098699752s ago: executing program 3 (id=3935): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") listen(0xffffffffffffffff, 0xfffffffd) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 16.805468186s ago: executing program 3 (id=3937): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000100)='Ke', 0x2) 16.565346099s ago: executing program 3 (id=3945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c0000000000000000850000000700000004000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 16.52826688s ago: executing program 35 (id=3945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c0000000000000000850000000700000004000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 11.656922284s ago: executing program 8 (id=4086): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 11.616593844s ago: executing program 8 (id=4090): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) 11.565220535s ago: executing program 8 (id=4092): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000e1d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) 11.561275925s ago: executing program 8 (id=4094): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") listen(0xffffffffffffffff, 0xfffffffd) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 11.440028487s ago: executing program 8 (id=4098): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x280, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.363938253s ago: executing program 7 (id=4105): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) 10.267056885s ago: executing program 7 (id=4106): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="05a300000000ffffffff0d00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 10.266784535s ago: executing program 7 (id=4107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003005cda36677265300000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 10.255638965s ago: executing program 7 (id=4108): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") listen(0xffffffffffffffff, 0xfffffffd) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 10.221810975s ago: executing program 7 (id=4109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x83, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4080) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "6e21bdda"}]}}, 0x0}, 0x0) 9.790020152s ago: executing program 7 (id=4125): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}]}, 0x2, 0x476, &(0x7f0000000540)="$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") 9.789916982s ago: executing program 36 (id=4125): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}]}, 0x2, 0x476, &(0x7f0000000540)="$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") 9.434479228s ago: executing program 8 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 9.410210918s ago: executing program 37 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.681104235s ago: executing program 1 (id=4288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)='hfsplus\x00', 0x8008, 0x0) 1.434011968s ago: executing program 2 (id=4293): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x140e, 0x88d1b80c9581b3cd, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4804) 1.392585489s ago: executing program 1 (id=4294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0], 0x88}}, 0x0) 1.371235309s ago: executing program 2 (id=4296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.339114189s ago: executing program 1 (id=4298): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa07130000000000000000000000000000000000440c00037f00000100000000890f0000000000ffffffffffffffff444c0001ac1e00010000010000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000440400000000"], 0x0) 1.30067657s ago: executing program 1 (id=4299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 1.237901951s ago: executing program 1 (id=4301): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 997.400135ms ago: executing program 9 (id=4314): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) writev(r0, &(0x7f0000000000), 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x40000000000007, 0x8a87) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket$nl_route(0x10, 0x3, 0x0) 774.629138ms ago: executing program 4 (id=4315): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 739.728529ms ago: executing program 4 (id=4316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8) 704.994579ms ago: executing program 4 (id=4317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x30}}, 0x0) 678.06758ms ago: executing program 4 (id=4318): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000046c0)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}], 0x1c) 601.518781ms ago: executing program 4 (id=4319): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x154) 601.341331ms ago: executing program 4 (id=4320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000e1d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) 530.171102ms ago: executing program 2 (id=4321): socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 517.199862ms ago: executing program 2 (id=4322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 505.316003ms ago: executing program 2 (id=4323): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000000000005c061894000000"]) 451.064903ms ago: executing program 2 (id=4324): r0 = epoll_create(0x7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc2181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6004, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x803ed, 0x20000, 0x0, 'queue1\x00', 0x5b7efbd4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x1000}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 402.709184ms ago: executing program 1 (id=4325): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setgroups(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) 285.393906ms ago: executing program 0 (id=4327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8) 257.190986ms ago: executing program 0 (id=4328): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa07130000000000000000000000000000000000440c00037f00000100000000890f0000000000ffffffffffffffff444c0001ac1e00010000010000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000440400000000"], 0x0) 256.955606ms ago: executing program 0 (id=4329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x46, 0x4, 0xfffffffc, 0xfffe, 0x0, 0x4, 0xfc, 0xfa, 0x3, 0x9, 0x7, 0x400, 0xfffe, 0x0, 0x0, 0x40000045, [0x2000]}}) 227.048236ms ago: executing program 0 (id=4330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xe4}}, 0x0) 226.773916ms ago: executing program 0 (id=4331): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) 169.453888ms ago: executing program 0 (id=4332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 154.911657ms ago: executing program 9 (id=4333): socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 140.067328ms ago: executing program 9 (id=4334): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000000000005c061894000000"]) 98.116238ms ago: executing program 9 (id=4335): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x26}, 0x28) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f00000002c0)="9c81", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337", 0x68}, {&(0x7f0000000800)="104b0b7073fb", 0x6}], 0x2}}], 0x2, 0x4004894) sendmmsg$inet(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="f1bf762b2df497800dcf425815085540a84b34e45a2dd0c3d6959de25e4b4099be1063e1fa1aa0551a8a566a38d445c8402a7de6a415fdc02268a82f7a81246c1d9fd8535d43baacb265ad29f678e05a457003a96a3366bdeb013a8071a7c7121d79215fb3719541d13bcd571cdfd0f947dfc4bf39462818ec015a8cc563478821a523aae22623dcd131f619735980753532d31e06529ec717b0f44ecb205014e379fcccf44f79c6b1ffe1efcc6c6022124d077a367b1b00bc79158a55cb6ba852541a52f84cd61dc7be74d97a5f79ea1d9722c68345ab2e57ac77785d14de0f1c63b1fecae05e09a1e7220f122dbc127d26ca959ad4d4360b6de6661599c2c8dfa01462b1679baa2fa10c1f48db81126af7c6b960441310102ed902635b36f2f209a5062564acd554ab4fc7205500378435c802d64ef48edcd0c92a8c538f490e8ac794fd0d456b9e05781ea508e419bd33fa70cd8df0c041bbdd73a1101ccbb9b58b8d89ce948816dd6ecb61ef15161f1ba4c5dea93adc83f810ae92f1243894aa582464ad805e150f0aca68bbbb2e4fe3d8c2053d8eeccdbbe259dc9a557124492a5e3105ae0b32ae5fc87194ac37455dad4712dd68e9102b26ebb7cdb137a7acb653442c97b5d8fdc76069555375f185b1b1385ef606528aedbbfc75082be35f1bf77ec19dfcd506fe9094e95d78da6ba8b1526f30658e501471b8edbfe9e117c7aee5a3a484fcde922fba28a3960750ab5f52f1dd27841d977e4b5883f1cceabb8478487bfd031e1e5f0896cbf8489cce0280b4cf914ea97445df382b63ce9c82ae56a05699287ca6bbeaf1fa24393203a4366a89388d8e260dc7e9d0d5d8345e2764650dfe8f8414f37cf750c516ed99e5ba59926b1eb3c0cc16a289d42682fd9fdf7eff5566da634983d7ba64621290fd3a616da3c6be3e854c8d27d8ce28363506c0ea41527be5d9d1bdf49be227f2949298c29a0c6d2ed07038a6cab167bd60b8a71f3a25de8242ca88c6f9166c6bf0996c4484b632898cc4b1de741b153093d85b3ac83849a361147deb3d5eb77e21491c88b4adc955c9b1e5fd41f1d7379d01cb36e165703fe0de180fd236e892fe2901a361fd1168e7fa25d0f6eb21a2a3ab290ea4e6f8f611dec443a089efb13fc92477d3aa7a977b74e6a6e85cf99b98e2dfbe717870b987729c4aa98a98311d822bd662060fe3bb55adb9d9c44d95b50cd214b8da99ad6fe849fb3acd9eedbe6c78761e2c6887774eb2e942cebcf4be4a662fe6166e7be02217d90d09ef84d3edd40ddb253004f09d1221c8ef2aa68e0a80cd0ba83fdce38e30a6e50cc99804c3f7802cfd2fee86e9ee88ae506eb57c632620d9777b3890c0854ec5e6562c9b0af383a332368c1534eec05ba36e91d09d1aca5993c1fdf24880e02d57f3d735d1674807841ba280fb6aef0f878815b027f828bb630c92c75e5e1c439e9e1e497b69b5460c8c5bf7ae8f50b67fec3cd62bc0b67b5fc472d23d4e9bc27c9cd3db01a230612ed3b3f387e6f02700a5e72f0166214cdaa80b2b64d15e805305aaee0812444dc28ce2717432852cc0524617c027afd340993f9de4f843c02a70ace7a6eafa98d67118f8c86b3bc72589226607e876793c4bc88f0e1aab31df9dbe75731af87d908bb35a194e7ba8a98c9ddb74446e3558ccebefe197375afbf2cfddf893b95a9ace4ca4cd5e067e196af1fc6ad0f510b011226a7e3ab49e9bea546fd6f5923f8d37484f3249597548e3f50c1a0a49ea7d967f10ecee53236d346ccb310bbe9117d247497f6f59ae558e29def6bca99b8269f4743df005d2377a1da748ea92342892dc02ff0428ceaa5bffd7f19aa3da258fcf257f74896623ebddd6436f446dade95137831bc2b6d7ad30ac373c6a68aad234c87172244ede7fc7304c891bce153072bd10621250578ba2abba3ef4aabd016dc08a8305bc15525070186388ade5a98039c3b4ef2fe2cd145811b58ee091cd82f6bd0b0cc5b7d7c9ec8a7ebb20f4d4c63c76b403072a7b36a054328c70ed491326f664f70540daa91f074aa675453b88419c9b71fca890a8dcb00d4c93f4483e35eec899d41d07295d75e0ee22793789711d677d825b90a99ed605dba9ad08186b670c566364cdb7e3e127e66f1a81861c230eb6424d14c2764cff1766d1f4b6d57a26546578ee92ecd576e8a6ca71f0dd62c59e5640ecf681ce69c30ab060229c874eca0f24d7f70acb743dd610b1a403143fd02cd5b4bb7af00ec9d82eabdb99b863491aa9afe302138044ee834d5230336181abd6f42fee2974447fdaa8f7d01b2da5b1ef76d51e156f85003618f81b50da3a85a851297c31cedfe871587bbe875f766cccb6a816fa4116bdb445c009ddad330d6b9e06ca53abcb95c900ff2b0ed435560cd5693eb3997f4efdcfbb87597c90b75787f16a46b61ee70e84d96c3ae05c9b6c55784ec6aaa622040c4106a12a8fbf5d406d3045ec5a2b6e41c7978cc8995c2019051cb8ce826c35606331b9e2b400ef02a92b27505d3e3b067168b45a69b1351cf1bb090559b1351d99833480a56ed069ebfcbdcb8698b8eddc6e1716643a40945bcd7661a85142f9b055e5e1c412f219e41214145fba6c90c291f167623e60417fed85aea0e1ab76f45b0911129fa8d28dd9bebd1bc65877c18f203933b825f49c78d9bca96d11b7aaf7d544fb4f0dee4ec6b8b84aaa90053e7890d9415d7086276cec753c8dd1c390fed94a154e19fc62e05264a9c18fe90e327c02fb118d32cf52546f79e0c53cbd108d21258ce2af81237da7433d4f6a8f450b5e38a50aa8f70acecf6403908fbe9c2029103e6880ad8904548a38ef8702ff12aeef4796262df7af010c4eff347e3d4c8fd0c3d756b95a4f443f6fb548875a96b0e8f5da9921b076cec6a279c4470e0326561142ddf8a1c955984dfa7352874bce54c375f9c760ddaceeffd0415ef9d69599bfcae93232d2520a55595a6417623c4429e0a9fcc63afa84793cf3ade59fa8aab05223b8ccec9c1571d6614c6f815e768b8d3abe6350a663e63848552455be8f74a51c756be19dc659ce345332469f541f2605f9193bf68f5b5c340952b7600617122b00177bb54e6a38ad5d48622264bffefcff766196532d0ee2194193fdaed206bd21f8c799ee5489bd0dd93e32d21403b7ce969302a779554885e02046e3e1f6342528d8adb7d65b0b4d45fc9796dcf51196a7ca1a123e7eb091dfac45bb5ae59cf180a27a97d64fff5f8c1281e6dd9941956df3cf923c3f71d0e0d62668407dcc04686794b5d427523081ee60c1c266ba2cbe4b70789d5a3b7af4b2db8db203e32a0d4c37d75c4197d9ebc26ff1bad8d006eb0054be3fb6bd8c1df9173c342b89d524169739c07fad5b62400859e0cc43dfc1d1464e4a8e6fe580ef27cc47f478377c2fd73f1cd414b76d3bb9f8cf0800e9eccc89ee08527e8a39130ab246390a170d2e9ab1fbec1ec5faba1a9e6759921885c61b97f9e12d08665975c10d928cd6bd337d5daba5d071397ac7b6d3c7a335fab47006ff0b33b4e21d3982df03517e864fddad387f94c015ba62a454671ea0119e143a8899eb0a279012e6afd957f2e80c74dba1278ce30de2a857498db4ef45ef1c5b5d120c10edad370ec88d1a641214360ce2a6cfb7dc3f0fcc73e975d6d238cb984564e5ef51abff9e2a4214433013d6a867255c3a8da2a12223d931dada0e5986d791bfd5257a9333c910922a55303fc474873d1722cee20c17ce4d394bf2dc3ab284c7bc5f88961a9cbdc5e5a8176a9448bee1f7304e44ea4241bcd914281dd7105d320e8d02d579c3b93b32bb3ed7df4863b795ec76573492f036d15108b213eeef99", 0xaba}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 67.374209ms ago: executing program 9 (id=4336): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) 0s ago: executing program 9 (id=4337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 218.606814][T12342] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 218.626816][T12342] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 218.634664][T12342] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 218.642879][T12342] syz.4.2973: attempt to access beyond end of device [ 218.642879][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.656187][T12342] syz.4.2973: attempt to access beyond end of device [ 218.656187][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.669540][T12342] syz.4.2973: attempt to access beyond end of device [ 218.669540][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.682835][T12342] syz.4.2973: attempt to access beyond end of device [ 218.682835][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.696537][T12342] syz.4.2973: attempt to access beyond end of device [ 218.696537][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.698452][T12339] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.709833][T12342] syz.4.2973: attempt to access beyond end of device [ 218.709833][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.716888][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.730426][T12342] syz.4.2973: attempt to access beyond end of device [ 218.730426][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.739788][T12339] bridge_slave_0: entered allmulticast mode [ 218.750298][T12342] syz.4.2973: attempt to access beyond end of device [ 218.750298][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.769413][T12342] syz.4.2973: attempt to access beyond end of device [ 218.769413][T12342] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.784549][T12339] bridge_slave_0: entered promiscuous mode [ 218.796411][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.803592][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.816177][T12339] bridge_slave_1: entered allmulticast mode [ 218.823176][T12339] bridge_slave_1: entered promiscuous mode [ 218.863129][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.881879][T12339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.894394][T12339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.916205][T12339] team0: Port device team_slave_0 added [ 218.922997][T12339] team0: Port device team_slave_1 added [ 218.957049][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.978241][T12339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.985259][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.011259][T12339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.022712][T12339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.029702][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.055680][T12339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.192716][T12365] bridge_slave_0: left allmulticast mode [ 219.198432][T12365] bridge_slave_0: left promiscuous mode [ 219.204200][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.217251][T12365] bridge_slave_1: left allmulticast mode [ 219.222961][T12365] bridge_slave_1: left promiscuous mode [ 219.228711][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.188652][T12365] bond0: (slave bond_slave_0): Releasing backup interface [ 220.202436][T12365] bond0: (slave bond_slave_1): Releasing backup interface [ 220.224885][T12365] team0: Port device team_slave_0 removed [ 220.241070][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 220.241084][ T29] audit: type=1326 audit(4837.226:19439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.271314][T12365] team0: Port device team_slave_1 removed [ 220.278231][T12365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.285832][T12365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.299601][T12374] loop4: detected capacity change from 0 to 512 [ 220.306979][ T29] audit: type=1326 audit(4837.276:19440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.330192][ T29] audit: type=1326 audit(4837.276:19441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.353231][ T29] audit: type=1326 audit(4837.276:19442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.376337][ T29] audit: type=1326 audit(4837.276:19443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.399476][ T29] audit: type=1326 audit(4837.276:19444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.422678][ T29] audit: type=1326 audit(4837.276:19445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.445818][ T29] audit: type=1326 audit(4837.276:19446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.468996][ T29] audit: type=1326 audit(4837.276:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.492140][ T29] audit: type=1326 audit(4837.276:19448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.4.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 220.531079][T12365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.538523][T12365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.547225][T12374] EXT4-fs mount: 20 callbacks suppressed [ 220.547240][T12374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.572128][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.586605][T12339] hsr_slave_0: entered promiscuous mode [ 220.593038][T12339] hsr_slave_1: entered promiscuous mode [ 220.598884][T12339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.607161][T12339] Cannot create hsr debugfs directory [ 220.631819][T12377] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2982'. [ 220.640903][T12377] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 220.656559][T12374] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2981'. [ 220.665710][T12374] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 220.705186][T12385] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.736996][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.757857][T12388] netlink: zone id is out of range [ 220.782783][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.801280][T12385] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.878015][T12403] loop7: detected capacity change from 0 to 512 [ 220.896562][T12403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.898027][T12385] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.931667][T12403] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.2991: corrupted inode contents [ 220.957777][T12403] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.2991: mark_inode_dirty error [ 220.971222][T12403] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.2991: corrupted inode contents [ 220.983304][T12403] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2991: mark_inode_dirty error [ 221.008931][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.018135][T12401] loop4: detected capacity change from 0 to 128 [ 221.060774][T12413] loop7: detected capacity change from 0 to 512 [ 221.081049][T12413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.095705][ T12] bond0 (unregistering): Released all slaves [ 221.104385][ T12] bond1 (unregistering): Released all slaves [ 221.112584][T12385] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.146071][T12413] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2994'. [ 221.155233][T12413] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 221.173966][ T12] hsr_slave_0: left promiscuous mode [ 221.182083][ T12] hsr_slave_1: left promiscuous mode [ 221.188936][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.198364][ T12] veth0_macvtap: left promiscuous mode [ 221.205070][ T12] veth1_vlan: left promiscuous mode [ 221.210601][ T12] veth0_vlan: left promiscuous mode [ 221.238409][T12419] loop7: detected capacity change from 0 to 512 [ 221.251315][T12419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.321818][T12419] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2996'. [ 221.331002][T12419] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 221.348507][T12423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.362805][T12424] netlink: zone id is out of range [ 221.369916][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.401078][T12423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.445276][T12423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.500542][T12423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.577758][T12339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.587847][T12339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.603660][T12339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.616167][T12339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.651627][T12423] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.669436][T12423] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.728670][T12423] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.745293][T12423] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.794116][T12438] loop4: detected capacity change from 0 to 512 [ 221.815781][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.835842][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.847327][T12438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.872077][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.879223][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.908234][T12438] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3000: corrupted inode contents [ 221.922082][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.929161][ T9371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.937514][T12438] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3000: mark_inode_dirty error [ 221.950846][T12438] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3000: corrupted inode contents [ 221.963071][T12438] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3000: mark_inode_dirty error [ 221.964299][T12339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.003131][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.038984][T12339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.094551][T12339] veth0_vlan: entered promiscuous mode [ 222.103575][T12339] veth1_vlan: entered promiscuous mode [ 222.124698][T12339] veth0_macvtap: entered promiscuous mode [ 222.132204][T12339] veth1_macvtap: entered promiscuous mode [ 222.142851][T12339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.155502][T12339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.164852][T12339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.173750][T12339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.182595][T12339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.191384][T12339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.321172][T12470] serio: Serial port ptm0 [ 222.635509][T12476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.666189][T12479] serio: Serial port ptm0 [ 222.685460][T12480] netlink: zone id is out of range [ 222.693807][T12476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.934595][T12385] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.945423][T12385] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.956118][T12385] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.975155][T12385] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.003578][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.012943][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.025510][T12484] wireguard0: entered promiscuous mode [ 223.031167][T12484] wireguard0: entered allmulticast mode [ 223.677557][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.697008][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.712672][T12516] wireguard1: entered promiscuous mode [ 223.718183][T12516] wireguard1: entered allmulticast mode [ 223.816286][T12528] loop3: detected capacity change from 0 to 512 [ 223.830614][T12528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.851646][T12528] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3028'. [ 223.860704][T12528] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 223.886448][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.919157][T12535] loop3: detected capacity change from 0 to 512 [ 223.930586][T12535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.953492][T12535] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3030'. [ 223.962573][T12535] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 223.988942][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.004627][T12539] loop3: detected capacity change from 0 to 512 [ 224.011201][T12539] EXT4-fs: Ignoring removed i_version option [ 224.017194][T12539] EXT4-fs: Ignoring removed nobh option [ 224.023214][T12539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.034196][T12539] EXT4-fs (loop3): 1 truncate cleaned up [ 224.040197][T12539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.077094][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.147359][T12544] loop3: detected capacity change from 0 to 512 [ 224.172041][T12544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.186701][T12544] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3033: corrupted inode contents [ 224.199016][T12544] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3033: mark_inode_dirty error [ 224.210712][T12544] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3033: corrupted inode contents [ 224.222776][T12544] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3033: mark_inode_dirty error [ 224.252406][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.266539][T12554] serio: Serial port ptm0 [ 224.298862][T12560] loop3: detected capacity change from 0 to 512 [ 224.310632][T12560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.329708][T12560] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3040'. [ 224.338846][T12560] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 224.366957][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.385875][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.395241][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.418926][T12566] wireguard1: entered promiscuous mode [ 224.424522][T12566] wireguard1: entered allmulticast mode [ 225.703198][T12476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.718696][T12580] serio: Serial port ptm0 [ 225.994715][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 225.994728][ T29] audit: type=1326 audit(4842.976:20068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.024040][ T29] audit: type=1326 audit(4842.976:20069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.057904][T12596] loop7: detected capacity change from 0 to 512 [ 226.113589][T12596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.132759][ T29] audit: type=1326 audit(4843.036:20070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.155902][ T29] audit: type=1326 audit(4843.036:20071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.178963][ T29] audit: type=1326 audit(4843.036:20072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.202059][ T29] audit: type=1326 audit(4843.036:20073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.225207][ T29] audit: type=1326 audit(4843.036:20074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.248333][ T29] audit: type=1326 audit(4843.036:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.271410][ T29] audit: type=1326 audit(4843.036:20076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.294551][ T29] audit: type=1326 audit(4843.036:20077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.7.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fd5a526e929 code=0x7ffc0000 [ 226.408945][T12603] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3052'. [ 226.418149][T12603] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 226.450735][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.032890][T12616] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.084276][T12619] netlink: zone id is out of range [ 227.101418][T12616] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.161516][T12616] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.240785][T12616] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.307715][T12616] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.321242][T12616] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.346978][T12616] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.361045][T12616] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.385600][T12635] loop7: detected capacity change from 0 to 128 [ 227.394261][T12635] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 227.402186][T12635] FAT-fs (loop7): Filesystem has been set read-only [ 227.408811][T12635] bio_check_eod: 37195 callbacks suppressed [ 227.408877][T12635] syz.7.3066: attempt to access beyond end of device [ 227.408877][T12635] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 227.429170][T12635] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 227.437117][T12635] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 227.445230][T12635] syz.7.3066: attempt to access beyond end of device [ 227.445230][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.464142][T12635] syz.7.3066: attempt to access beyond end of device [ 227.464142][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.478330][T12635] syz.7.3066: attempt to access beyond end of device [ 227.478330][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.494935][T12635] syz.7.3066: attempt to access beyond end of device [ 227.494935][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.508620][T12635] syz.7.3066: attempt to access beyond end of device [ 227.508620][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.523584][T12635] syz.7.3066: attempt to access beyond end of device [ 227.523584][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.580064][T12635] syz.7.3066: attempt to access beyond end of device [ 227.580064][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.593738][T12635] syz.7.3066: attempt to access beyond end of device [ 227.593738][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.608561][T12635] syz.7.3066: attempt to access beyond end of device [ 227.608561][T12635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 228.696774][T12682] serio: Serial port ptm0 [ 228.812853][T12476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.865603][T12476] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.890452][T12476] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.903897][T12476] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.917257][T12476] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.028030][T12693] serio: Serial port ptm0 [ 229.128610][T12702] serio: Serial port ptm1 [ 230.242485][T12727] serio: Serial port ptm1 [ 230.479421][T12739] serio: Serial port ptm0 [ 230.977692][T12743] loop7: detected capacity change from 0 to 8192 [ 231.088924][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 231.088937][ T29] audit: type=1326 audit(4848.066:20154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.125126][T12753] loop3: detected capacity change from 0 to 512 [ 231.133732][ T29] audit: type=1326 audit(4848.106:20155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.156883][ T29] audit: type=1326 audit(4848.106:20156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.180101][ T29] audit: type=1326 audit(4848.106:20157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.203276][ T29] audit: type=1326 audit(4848.106:20158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.226366][ T29] audit: type=1326 audit(4848.106:20159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.249485][ T29] audit: type=1326 audit(4848.106:20160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.272606][ T29] audit: type=1326 audit(4848.106:20161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.295760][ T29] audit: type=1326 audit(4848.106:20162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.318901][ T29] audit: type=1326 audit(4848.106:20163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c06e929 code=0x7ffc0000 [ 231.343808][T12753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.389656][T12753] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3107'. [ 231.398745][T12753] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 231.570580][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.631268][T12764] loop2: detected capacity change from 0 to 128 [ 231.913072][T12778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.932489][T12780] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.962929][T12778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.975221][T12785] netlink: zone id is out of range [ 231.982952][T12787] netlink: zone id is out of range [ 231.991191][T12780] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.036045][T12778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.070465][T12780] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.112491][T12778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.151693][T12780] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.217156][T12778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.228768][T12778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.240688][T12778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.252573][T12778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.403762][T12780] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.416629][T12780] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.428183][T12780] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.441375][T12780] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.456619][T12802] Falling back ldisc for ptm0. [ 232.574734][T12805] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.631808][T12808] netlink: zone id is out of range [ 232.718859][T12805] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.779027][T12805] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.842979][T12805] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.085779][T12817] serio: Serial port ptm0 [ 233.118345][T12815] loop7: detected capacity change from 0 to 8192 [ 233.141074][T12805] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.162284][T12805] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.175517][T12805] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.196396][T12805] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.265165][T12824] sd 0:0:1:0: device reset [ 233.389770][T12832] serio: Serial port ptm0 [ 233.413460][T12837] loop2: detected capacity change from 0 to 128 [ 233.447675][T12837] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 233.455651][T12837] FAT-fs (loop2): Filesystem has been set read-only [ 233.479318][T12837] bio_check_eod: 24484 callbacks suppressed [ 233.479332][T12837] syz.2.3132: attempt to access beyond end of device [ 233.479332][T12837] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 233.511105][T12837] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 233.518976][T12837] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 233.547072][T12837] syz.2.3132: attempt to access beyond end of device [ 233.547072][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.579184][T12837] syz.2.3132: attempt to access beyond end of device [ 233.579184][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.624537][T12837] syz.2.3132: attempt to access beyond end of device [ 233.624537][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.669131][T12837] syz.2.3132: attempt to access beyond end of device [ 233.669131][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.705277][T12837] syz.2.3132: attempt to access beyond end of device [ 233.705277][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.739565][T12837] syz.2.3132: attempt to access beyond end of device [ 233.739565][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.753035][T12837] syz.2.3132: attempt to access beyond end of device [ 233.753035][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.766476][T12837] syz.2.3132: attempt to access beyond end of device [ 233.766476][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 233.780235][T12837] syz.2.3132: attempt to access beyond end of device [ 233.780235][T12837] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 234.305511][T12851] loop2: detected capacity change from 0 to 128 [ 234.315498][T12851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.323453][T12851] FAT-fs (loop2): Filesystem has been set read-only [ 234.339269][T12851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.347267][T12851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.359382][T12847] loop7: detected capacity change from 0 to 8192 [ 234.427755][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 234.503922][T12857] loop7: detected capacity change from 0 to 512 [ 234.537978][T12857] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 234.568178][T12857] EXT4-fs (loop7): 1 truncate cleaned up [ 234.576379][T12861] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.589391][T12857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.632770][T12862] netlink: zone id is out of range [ 234.665449][T12861] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.730266][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.748290][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3147'. [ 234.759668][T12861] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.802063][T12871] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.838718][T12861] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.860910][T12874] netlink: zone id is out of range [ 234.874996][T12873] serio: Serial port ptm0 [ 234.881023][T12871] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.951209][T12871] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.010579][T12871] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.094765][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.107433][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.119357][T12882] wireguard0: entered promiscuous mode [ 235.124908][T12882] wireguard0: entered allmulticast mode [ 235.143707][T12885] loop2: detected capacity change from 0 to 512 [ 235.176891][T12871] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.188486][T12885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.204465][T12871] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.219895][T12871] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.231412][T12885] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3153: iget: bad i_size value: 2533274857506816 [ 235.234891][T12871] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.476019][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.975203][T12901] loop4: detected capacity change from 0 to 128 [ 236.136560][T12861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.147853][T12861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.158967][T12861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.170450][T12861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.244345][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3159'. [ 236.320599][T12907] Falling back ldisc for ptm0. [ 236.647538][T12931] loop2: detected capacity change from 0 to 512 [ 236.663026][T12931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.675325][T12922] loop7: detected capacity change from 0 to 128 [ 236.684085][T12915] chnl_net:caif_netlink_parms(): no params data found [ 236.700327][T12936] loop3: detected capacity change from 0 to 512 [ 236.708571][T12931] EXT4-fs (loop2): 1 truncate cleaned up [ 236.715798][T12931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.718290][T12936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.741469][T12943] loop4: detected capacity change from 0 to 512 [ 236.750772][T12943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.766741][T12943] EXT4-fs (loop4): 1 truncate cleaned up [ 236.777556][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.779220][T12936] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3168: iget: bad i_size value: 2533274857506816 [ 236.784679][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.804552][T12943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.804918][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.817347][T12915] bridge_slave_0: entered allmulticast mode [ 236.832628][T12915] bridge_slave_0: entered promiscuous mode [ 236.839852][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.846988][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.854509][T12915] bridge_slave_1: entered allmulticast mode [ 236.861261][T12915] bridge_slave_1: entered promiscuous mode [ 236.890321][T12947] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.903224][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.913885][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.924833][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.938316][T12951] netlink: zone id is out of range [ 236.953513][T12915] team0: Port device team_slave_0 added [ 236.963081][T12947] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.975200][T12915] team0: Port device team_slave_1 added [ 236.993062][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.011023][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.018066][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.044175][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.055504][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.062535][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.088548][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.104407][T12947] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.132877][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 237.132893][ T29] audit: type=1326 audit(4854.116:20304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.137479][T12961] loop4: detected capacity change from 0 to 512 [ 237.140799][ T29] audit: type=1326 audit(4854.116:20305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.178682][T12959] Falling back ldisc for ptm0. [ 237.191610][ T29] audit: type=1326 audit(4854.116:20306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.219399][ T29] audit: type=1326 audit(4854.116:20307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.242542][ T29] audit: type=1326 audit(4854.116:20308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.265651][ T29] audit: type=1326 audit(4854.116:20309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.288973][ T29] audit: type=1326 audit(4854.116:20310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.292351][T12961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.312881][ T29] audit: type=1326 audit(4854.116:20311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.349242][ T29] audit: type=1326 audit(4854.116:20312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.372372][ T29] audit: type=1326 audit(4854.116:20313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f28d968e929 code=0x7ffc0000 [ 237.398156][T12915] hsr_slave_0: entered promiscuous mode [ 237.405822][T12915] hsr_slave_1: entered promiscuous mode [ 237.411846][T12915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.426568][T12915] Cannot create hsr debugfs directory [ 237.436563][T12947] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.453402][T12966] serio: Serial port ptm0 [ 237.459453][T12964] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3175'. [ 237.468583][T12964] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 237.497356][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.553279][T12915] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.596287][T12980] loop7: detected capacity change from 0 to 512 [ 237.611295][T12915] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.611686][T12983] loop4: detected capacity change from 0 to 128 [ 237.635536][T12982] serio: Serial port ptm0 [ 237.644976][T12976] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 237.653033][T12976] FAT-fs (loop4): Filesystem has been set read-only [ 237.656281][T12980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.660114][T12976] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 237.676943][T12980] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.3182: iget: bad i_size value: 2533274857506816 [ 237.679974][T12976] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 237.717378][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.731014][T12915] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.746827][T12947] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.780262][T12915] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.789180][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3184'. [ 237.805616][T12992] loop3: detected capacity change from 0 to 512 [ 237.811493][T12947] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.812605][T12992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.823518][T12947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.845047][T12947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.855293][T12992] EXT4-fs (loop3): 1 truncate cleaned up [ 237.949564][T12992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.033324][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.053926][T13004] serio: Serial port ptm0 [ 238.094341][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.104449][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.120909][T13010] wireguard0: entered promiscuous mode [ 238.126404][T13010] wireguard0: entered allmulticast mode [ 238.163468][T13014] loop2: detected capacity change from 0 to 512 [ 238.172066][T13014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.184753][T13014] EXT4-fs (loop2): 1 truncate cleaned up [ 238.190962][T13014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.281269][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.443994][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.452743][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.463510][T13029] wireguard0: entered promiscuous mode [ 238.468990][T13029] wireguard0: entered allmulticast mode [ 238.765192][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3204'. [ 238.774672][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3204'. [ 238.785876][T13040] xt_hashlimit: max too large, truncated to 1048576 [ 238.817435][T13043] serio: Serial port ptm0 [ 238.829505][T13046] loop7: detected capacity change from 0 to 512 [ 238.840338][T13046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.860841][T13046] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3207'. [ 238.869952][T13046] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 238.895465][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.926704][T13053] loop7: detected capacity change from 0 to 512 [ 238.933733][T13053] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 238.945676][T13053] EXT4-fs (loop7): 1 truncate cleaned up [ 238.953606][T13053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.980618][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.212292][T13066] loop4: detected capacity change from 0 to 128 [ 239.222442][T13066] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 239.230332][T13066] FAT-fs (loop4): Filesystem has been set read-only [ 239.237621][T13066] bio_check_eod: 44613 callbacks suppressed [ 239.237634][T13066] syz.4.3212: attempt to access beyond end of device [ 239.237634][T13066] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 239.249206][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.266332][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.267014][T13066] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 239.282023][T13066] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 239.290252][T13066] syz.4.3212: attempt to access beyond end of device [ 239.290252][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.292297][T13070] wireguard0: entered promiscuous mode [ 239.304027][T13066] syz.4.3212: attempt to access beyond end of device [ 239.304027][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.308964][T13070] wireguard0: entered allmulticast mode [ 239.328009][T13066] syz.4.3212: attempt to access beyond end of device [ 239.328009][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.342109][T13066] syz.4.3212: attempt to access beyond end of device [ 239.342109][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.355400][T13066] syz.4.3212: attempt to access beyond end of device [ 239.355400][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.368762][T13066] syz.4.3212: attempt to access beyond end of device [ 239.368762][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.382041][T13066] syz.4.3212: attempt to access beyond end of device [ 239.382041][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.395331][T13066] syz.4.3212: attempt to access beyond end of device [ 239.395331][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.408697][T13066] syz.4.3212: attempt to access beyond end of device [ 239.408697][T13066] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 239.718706][T13076] loop3: detected capacity change from 0 to 512 [ 239.732352][T13076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.751469][T13076] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3217'. [ 239.760563][T13076] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 239.791477][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.827658][T13083] loop3: detected capacity change from 0 to 512 [ 239.834517][T13083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.846394][T13083] EXT4-fs (loop3): 1 truncate cleaned up [ 239.852591][T13083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.885263][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.374466][T13120] loop4: detected capacity change from 0 to 512 [ 240.411744][T13120] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 240.463528][T13120] EXT4-fs (loop4): mount failed crond[3096]: time disparity of 77 minutes detected [ 240.710563][T13124] loop4: detected capacity change from 0 to 256 [ 240.735377][T13124] FAT-fs (loop4): codepage cp860 not found [ 240.752002][T12915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.775794][T12915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.836953][T13127] netlink: 21 bytes leftover after parsing attributes in process `syz.7.3236'. [ 240.948629][T13127] hsr0: entered allmulticast mode [ 240.953735][T13127] hsr_slave_0: entered allmulticast mode [ 240.959410][T13127] hsr_slave_1: entered allmulticast mode [ 241.500836][ T3323] bond0 (unregistering): Released all slaves [ 241.510739][T12915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.526438][T12915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.552571][ T3323] tipc: Disabling bearer [ 241.557947][ T3323] tipc: Left network mode [ 241.572683][ T3323] hsr_slave_0: left promiscuous mode [ 241.579818][ T3323] hsr_slave_1: left promiscuous mode [ 241.591631][ T3323] veth1_macvtap: left promiscuous mode [ 241.597203][ T3323] veth0_macvtap: left promiscuous mode [ 241.603776][ T3323] veth1_vlan: left promiscuous mode [ 241.609413][ T3323] veth0_vlan: left promiscuous mode [ 241.713047][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.726191][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.740000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.747084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.760249][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.767400][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.873572][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.138920][T12915] veth0_vlan: entered promiscuous mode [ 242.173960][T12915] veth1_vlan: entered promiscuous mode [ 242.225453][T12915] veth0_macvtap: entered promiscuous mode [ 242.245067][T12915] veth1_macvtap: entered promiscuous mode [ 242.270720][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.299708][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.323586][T12915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.332430][T12915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.341158][T12915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.349930][T12915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.814572][T13198] bridge_slave_0: left allmulticast mode [ 242.820380][T13198] bridge_slave_0: left promiscuous mode [ 242.826053][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.856675][T13198] bridge_slave_1: left allmulticast mode [ 242.862400][T13198] bridge_slave_1: left promiscuous mode [ 242.868044][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.894912][T13198] bond0: (slave bond_slave_0): Releasing backup interface [ 242.906307][T13198] bond0: (slave bond_slave_1): Releasing backup interface [ 242.923028][T13198] team0: Port device team_slave_0 removed [ 242.934980][T13198] team0: Port device team_slave_1 removed [ 242.946995][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.954495][T13198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.981552][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.989010][T13198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.044474][T13199] tipc: Started in network mode [ 243.049450][T13199] tipc: Node identity 7f000001, cluster identity 4711 [ 243.058870][T13199] tipc: Enabled bearer , priority 10 [ 243.070211][T13199] tipc: Enabled bearer , priority 0 [ 243.189041][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.196231][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.267999][T13210] loop2: detected capacity change from 0 to 764 [ 243.281723][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.311584][T13214] loop2: detected capacity change from 0 to 512 [ 243.318540][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.327520][T13214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.341154][T13214] EXT4-fs (loop2): 1 truncate cleaned up [ 243.347210][T13214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.381757][T13214] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.3260: bad entry in directory: inode out of bounds - offset=44, inode=32780, rec_len=16, size=1024 fake=0 [ 243.381821][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 243.381881][ T29] audit: type=1400 audit(4860.366:20663): avc: denied { link } for pid=13213 comm="syz.2.3260" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.430201][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.488430][T13228] netlink: 'syz.3.3265': attribute type 6 has an invalid length. [ 243.511781][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.511991][ T29] audit: type=1400 audit(4860.496:20664): avc: denied { create } for pid=13231 comm="syz.3.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 243.521812][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.565888][ T29] audit: type=1400 audit(4860.546:20665): avc: denied { remount } for pid=13234 comm="syz.3.3269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 243.850996][T13242] syzkaller1: entered promiscuous mode [ 243.856521][T13242] syzkaller1: entered allmulticast mode [ 243.880452][ T29] audit: type=1400 audit(4860.866:20666): avc: denied { ioctl } for pid=13245 comm="syz.1.3274" path="socket:[51742]" dev="sockfs" ino=51742 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.016192][T13260] capability: warning: `syz.3.3280' uses deprecated v2 capabilities in a way that may be insecure [ 244.059254][ T29] audit: type=1400 audit(4861.026:20667): avc: denied { bind } for pid=13261 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.078786][ T29] audit: type=1400 audit(4861.026:20668): avc: denied { listen } for pid=13261 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.098367][ T29] audit: type=1400 audit(4861.026:20669): avc: denied { connect } for pid=13261 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.175265][T13267] loop7: detected capacity change from 0 to 512 [ 244.183391][T13267] EXT4-fs: test_dummy_encryption option not supported [ 244.208150][ T3615] tipc: Node number set to 2130706433 [ 244.523948][T13273] loop7: detected capacity change from 0 to 256 [ 244.638779][ T29] audit: type=1400 audit(4861.616:20670): avc: denied { write } for pid=13278 comm="syz.2.3286" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 244.688529][T13281] loop4: detected capacity change from 0 to 512 [ 244.715280][T13281] EXT4-fs: inline encryption not supported [ 244.752483][T13281] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.797995][T13281] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3287: invalid indirect mapped block 4294967295 (level 0) [ 244.813720][T13281] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3287: invalid indirect mapped block 4294967295 (level 1) [ 244.823296][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.828174][T13281] EXT4-fs (loop4): 1 orphan inode deleted [ 244.841769][T13281] EXT4-fs (loop4): 1 truncate cleaned up [ 244.841838][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.847875][T13281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.906386][ T29] audit: type=1400 audit(4861.886:20671): avc: denied { create } for pid=13280 comm="syz.4.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.943391][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.977886][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.015894][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.038970][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.047889][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.048726][ T29] audit: type=1400 audit(4862.016:20672): avc: denied { create } for pid=13298 comm="syz.3.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.259046][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 245.283773][T13315] bridge0: entered allmulticast mode [ 245.290741][T13315] bridge_slave_1: left allmulticast mode [ 245.296432][T13315] bridge_slave_1: left promiscuous mode [ 245.302187][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.311616][T13315] bridge_slave_0: left allmulticast mode [ 245.317416][T13315] bridge_slave_0: left promiscuous mode [ 245.323156][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.065684][T13338] loop7: detected capacity change from 0 to 128 [ 246.115986][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.213879][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.419773][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.428469][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.481504][ T9371] bio_check_eod: 23354 callbacks suppressed [ 246.481526][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.481526][ T9371] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 246.504540][T13350] netlink: 'syz.3.3315': attribute type 10 has an invalid length. [ 246.513009][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.513009][ T9371] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 246.527991][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.527991][ T9371] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 246.543032][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.543032][ T9371] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 246.557118][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.557118][ T9371] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 246.573018][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.573018][ T9371] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 246.587787][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.587787][ T9371] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 246.589021][T13350] batman_adv: batadv0: Adding interface: team0 [ 246.601125][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.601125][ T9371] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 246.607324][T13350] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.620622][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.620622][ T9371] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 246.645777][T13350] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 246.672118][ T9371] kworker/u8:9: attempt to access beyond end of device [ 246.672118][ T9371] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 246.738334][T13358] random: crng reseeded on system resumption [ 246.926319][T13370] syz_tun: entered allmulticast mode [ 246.933539][T13369] syz_tun: left allmulticast mode [ 246.987586][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.996227][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.221616][T13384] loop3: detected capacity change from 0 to 512 [ 247.228161][T13384] ext4: Unknown parameter 'obj_type' [ 247.686584][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.697376][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.728275][T13397] loop4: detected capacity change from 0 to 256 [ 247.743979][T13397] FAT-fs (loop4): codepage cp932 not found [ 248.989630][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 248.989646][ T29] audit: type=1400 audit(4865.676:20681): avc: denied { mount } for pid=13430 comm="syz.1.3348" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 249.093692][ T29] audit: type=1400 audit(4866.076:20682): avc: denied { getopt } for pid=13440 comm="syz.3.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.117180][T13446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.145303][ T29] audit: type=1400 audit(4866.116:20683): avc: denied { name_bind } for pid=13444 comm="syz.4.3353" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 249.173961][T13450] loop4: detected capacity change from 0 to 128 [ 249.432824][T13450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.532089][T13450] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3356'. [ 249.546760][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.556894][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.565256][T12200] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.626871][T13473] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3366'. [ 249.683693][T13479] loop4: detected capacity change from 0 to 128 [ 250.055815][T13487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.079192][T13487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.135170][T13495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.143717][T13495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.674639][ T29] audit: type=1400 audit(4867.656:20684): avc: denied { getopt } for pid=13523 comm="syz.3.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.775102][T13542] random: crng reseeded on system resumption [ 250.785733][ T29] audit: type=1400 audit(4867.766:20685): avc: denied { ioctl } for pid=13541 comm="syz.3.3395" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 250.886686][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.904490][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.536014][T13585] loop7: detected capacity change from 0 to 512 [ 251.549591][T13585] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 251.565483][T13585] EXT4-fs (loop7): 1 truncate cleaned up [ 251.576000][T13585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.585691][T13595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.601889][ T29] audit: type=1400 audit(4868.556:20686): avc: denied { read } for pid=13589 comm="syz.4.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.622640][T13595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.660865][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.758417][T13603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.768111][T13603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.809089][ T29] audit: type=1400 audit(4868.786:20687): avc: denied { setopt } for pid=13598 comm="syz.2.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.846880][ T29] audit: type=1400 audit(4868.796:20688): avc: denied { shutdown } for pid=13611 comm="syz.4.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.927661][ T29] audit: type=1400 audit(4868.906:20689): avc: denied { unmount } for pid=10464 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 251.931950][T13624] loop4: detected capacity change from 0 to 512 [ 251.969763][T13624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.995130][ T29] audit: type=1400 audit(4868.976:20690): avc: denied { read } for pid=13623 comm="syz.4.3432" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.098535][T13644] loop7: detected capacity change from 0 to 4096 [ 252.110897][T13644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.127865][T13644] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3440: corrupted inode contents [ 252.140890][T13653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.141007][T13644] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #15: comm syz.7.3440: mark_inode_dirty error [ 252.160871][T13644] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3440: corrupted inode contents [ 252.172879][T13644] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3440: mark_inode_dirty error [ 252.186292][T13644] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3440: corrupted inode contents [ 252.198588][T13644] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3440: mark_inode_dirty error [ 252.222274][T13662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3448'. [ 252.232392][T13644] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3440: corrupted inode contents [ 252.245017][T13644] EXT4-fs error (device loop7): ext4_truncate:4597: inode #15: comm syz.7.3440: mark_inode_dirty error [ 252.274757][T13644] EXT4-fs error (device loop7) in ext4_setattr:5986: Corrupt filesystem [ 252.300097][T13673] loop2: detected capacity change from 0 to 128 [ 252.306695][T13673] EXT4-fs: test_dummy_encryption option not supported [ 252.318023][T13657] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3440: corrupted inode contents [ 252.350060][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.373625][T13683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.409583][T13686] loop3: detected capacity change from 0 to 2048 [ 252.424432][T13686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 252.491154][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 252.526554][T13703] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3466' sets config #262144 [ 252.632667][T13714] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.655503][T13717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.052697][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.104189][T13724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.112938][T13724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.504699][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.515041][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.608748][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.620538][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.876851][T13746] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 253.876851][T13746] program syz.4.3483 not setting count and/or reply_len properly [ 254.396862][T13752] loop7: detected capacity change from 0 to 1024 [ 254.421425][T13752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.437767][T13752] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 1: comm syz.7.3486: lblock 1 mapped to illegal pblock 1 (length 15) [ 254.460945][T13752] EXT4-fs (loop7): Remounting filesystem read-only [ 254.488923][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.514035][T13761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.547394][T13761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.577531][T13767] loop3: detected capacity change from 0 to 512 [ 254.602160][T13767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.620320][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.628843][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.640210][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.329369][T13792] loop7: detected capacity change from 0 to 512 [ 255.583197][T13792] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3498: bg 0: block 288: padding at end of block bitmap is not set [ 255.602384][T13718] cgroup: fork rejected by pids controller in /syz2 [ 255.609396][T13792] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 255.620601][T13792] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3498: attempt to clear invalid blocks 1024 len 1 [ 255.633997][T13792] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3498: invalid indirect mapped block 1819239214 (level 0) [ 255.635221][T13825] netlink: 'syz.1.3504': attribute type 1 has an invalid length. [ 255.657182][T13792] EXT4-fs (loop7): 1 truncate cleaned up [ 255.663356][T13792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.825652][T13847] tipc: Started in network mode [ 255.831127][T13847] tipc: Node identity 4, cluster identity 4711 [ 255.837384][T13847] tipc: Node number set to 4 [ 256.045059][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.095792][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 256.095887][ T29] audit: type=1400 audit(4873.076:20698): avc: denied { accept } for pid=13855 comm="syz.3.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.247696][T13868] loop7: detected capacity change from 0 to 4096 [ 256.256494][T13870] netlink: 'syz.1.3522': attribute type 10 has an invalid length. [ 256.256912][T13868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.280858][T13870] team0: Port device netdevsim1 added [ 256.283355][T13868] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3518: corrupted inode contents [ 256.299365][T13868] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #15: comm syz.7.3518: mark_inode_dirty error [ 256.313687][T13868] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3518: corrupted inode contents [ 256.326449][T13868] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3518: mark_inode_dirty error [ 256.339896][T13868] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3518: corrupted inode contents [ 256.353196][T13868] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3518: mark_inode_dirty error [ 256.354310][T13878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.364987][T13868] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #15: comm syz.7.3518: corrupted inode contents [ 256.385198][T13868] EXT4-fs error (device loop7): ext4_truncate:4597: inode #15: comm syz.7.3518: mark_inode_dirty error [ 256.396778][T13868] EXT4-fs error (device loop7) in ext4_setattr:5986: Corrupt filesystem [ 256.423189][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.427744][T13884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.440915][T13884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.513662][ T29] audit: type=1400 audit(4873.496:20699): avc: denied { write } for pid=13893 comm="syz.7.3533" name="event2" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 256.537812][ T29] audit: type=1400 audit(4873.496:20700): avc: denied { ioctl } for pid=13893 comm="syz.7.3533" path="/dev/input/event2" dev="devtmpfs" ino=251 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 256.618087][ T29] audit: type=1400 audit(4873.596:20701): avc: denied { write } for pid=13899 comm="syz.4.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.686785][T13906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.114219][ T29] audit: type=1400 audit(4874.096:20702): avc: denied { connect } for pid=13918 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.187186][ T29] audit: type=1326 audit(4874.156:20703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13920 comm="syz.1.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8969e929 code=0x7ffc0000 [ 257.210797][ T29] audit: type=1326 audit(4874.156:20704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13920 comm="syz.1.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8969e929 code=0x7ffc0000 [ 257.233934][ T29] audit: type=1326 audit(4874.156:20705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13920 comm="syz.1.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0e8969e929 code=0x7ffc0000 [ 257.257163][ T29] audit: type=1326 audit(4874.156:20706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13920 comm="syz.1.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8969e929 code=0x7ffc0000 [ 257.280346][ T29] audit: type=1326 audit(4874.156:20707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13920 comm="syz.1.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8969e929 code=0x7ffc0000 [ 257.693977][T13967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.703709][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3568'. [ 257.712747][T13969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3568'. [ 257.785194][T13987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.428158][T14051] pim6reg: entered allmulticast mode [ 258.445276][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 259.320258][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 259.434941][T14073] loop3: detected capacity change from 0 to 256 [ 259.598317][T14073] FAT-fs (loop3): codepage cp869 not found [ 259.832786][T14127] loop2: detected capacity change from 0 to 512 [ 259.861870][T14127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.646049][T14174] loop4: detected capacity change from 0 to 1024 [ 260.669792][T14174] EXT4-fs: Ignoring removed oldalloc option [ 260.675841][T14174] EXT4-fs: Ignoring removed bh option [ 260.720317][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.724466][T14184] usb usb1: usbfs: process 14184 (syz.3.3661) did not claim interface 0 before use [ 260.738735][T14184] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.748578][T14174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.022284][T14217] usb usb1: usbfs: process 14217 (syz.3.3674) did not claim interface 0 before use [ 261.081818][T14217] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.766149][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 261.766165][ T29] audit: type=1400 audit(4878.746:20733): avc: denied { write } for pid=14237 comm="syz.7.3683" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 261.811195][ T29] audit: type=1400 audit(4878.776:20734): avc: denied { ioctl } for pid=14237 comm="syz.7.3683" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 261.846518][T14242] usb usb1: usbfs: process 14242 (syz.1.3686) did not claim interface 0 before use [ 261.847373][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.859740][T14242] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.892669][T14247] netlink: 'syz.2.3688': attribute type 9 has an invalid length. [ 261.900546][T14247] netlink: 'syz.2.3688': attribute type 7 has an invalid length. [ 261.908445][T14247] netlink: 'syz.2.3688': attribute type 8 has an invalid length. [ 262.020843][ T29] audit: type=1400 audit(4878.996:20735): avc: denied { bind } for pid=14270 comm="syz.4.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.405452][T14295] loop4: detected capacity change from 0 to 1756 [ 262.621900][T14315] loop4: detected capacity change from 0 to 256 [ 262.634508][T14315] FAT-fs (loop4): IO charset macinuit not found [ 262.724268][ T29] audit: type=1400 audit(4879.706:20736): avc: denied { name_connect } for pid=14326 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 262.745218][ T29] audit: type=1400 audit(4879.706:20737): avc: denied { listen } for pid=14326 comm="syz.4.3723" lport=56786 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.767967][ T29] audit: type=1400 audit(4879.706:20738): avc: denied { accept } for pid=14326 comm="syz.4.3723" lport=56786 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.790671][ T29] audit: type=1400 audit(4879.706:20739): avc: denied { setopt } for pid=14326 comm="syz.4.3723" lport=56786 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 263.278115][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.286954][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.601149][T14427] loop3: detected capacity change from 0 to 256 [ 263.613798][T14427] FAT-fs (loop3): codepage cp950 not found [ 263.845505][ T29] audit: type=1400 audit(4880.826:20740): avc: denied { execute_no_trans } for pid=14440 comm="syz.2.3774" path="/136/file1" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.955210][T14549] tipc: Started in network mode [ 264.960131][T14549] tipc: Node identity 4, cluster identity 4711 [ 264.966491][T14549] tipc: Node number set to 4 [ 264.969520][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.989754][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.104175][T14564] dvmrp1: entered allmulticast mode [ 265.264435][ T29] audit: type=1400 audit(4882.246:20741): avc: denied { read } for pid=14571 comm="syz.2.3835" lport=59571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.023358][T14585] loop3: detected capacity change from 0 to 512 [ 266.058644][T14585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.229102][T14599] tap0: tun_chr_ioctl cmd 1074025680 [ 266.382938][T10743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.619111][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3866'. [ 266.658598][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3869'. [ 266.960864][ T29] audit: type=1400 audit(4883.936:20742): avc: denied { read } for pid=14685 comm="syz.1.3885" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.983953][ T29] audit: type=1400 audit(4883.936:20743): avc: denied { open } for pid=14685 comm="syz.1.3885" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 267.007543][ T29] audit: type=1400 audit(4883.946:20744): avc: denied { ioctl } for pid=14685 comm="syz.1.3885" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 267.918568][T14713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3896'. [ 268.583078][T14738] loop3: detected capacity change from 0 to 256 [ 268.652007][T14738] FAT-fs (loop3): codepage cp866 not found [ 268.666372][T14740] loop2: detected capacity change from 0 to 4096 [ 268.681233][T14740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.708466][T14740] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3908: corrupted inode contents [ 268.737132][T14744] loop3: detected capacity change from 0 to 128 [ 268.761204][T14740] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.3908: mark_inode_dirty error [ 268.795808][T14740] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3908: corrupted inode contents [ 268.832142][T14744] bio_check_eod: 212 callbacks suppressed [ 268.832160][T14744] syz.3.3909: attempt to access beyond end of device [ 268.832160][T14744] loop3: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 268.841092][T14740] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.3908: mark_inode_dirty error [ 268.891944][T14740] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3908: corrupted inode contents [ 268.914238][T14740] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.3908: mark_inode_dirty error [ 268.927789][T14740] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3908: corrupted inode contents [ 268.941102][T14740] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.3908: mark_inode_dirty error [ 268.953644][T14740] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem [ 269.011653][T14746] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3908: corrupted inode contents [ 269.046952][T14768] usb usb1: usbfs: process 14768 (syz.3.3920) did not claim interface 0 before use [ 269.073033][T14768] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.093322][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.108231][T14775] loop4: detected capacity change from 0 to 512 [ 269.141202][T14775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.189352][ T29] audit: type=1400 audit(4886.166:20745): avc: denied { append } for pid=14774 comm="syz.4.3923" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.211323][ T29] audit: type=1400 audit(4886.166:20746): avc: denied { ioctl } for pid=14774 comm="syz.4.3923" path="/207/bus/file1" dev="loop4" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.254986][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.291445][T14798] loop7: detected capacity change from 0 to 512 [ 269.550055][ T29] audit: type=1400 audit(4886.336:20747): avc: denied { name_bind } for pid=14786 comm="syz.1.3928" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 269.623172][T14801] loop3: detected capacity change from 0 to 128 [ 269.643871][T14798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.659757][T14801] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.681952][ T29] audit: type=1400 audit(4886.666:20748): avc: denied { mounton } for pid=14800 comm="syz.3.3935" path="/291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 269.732752][T14806] usb usb1: usbfs: process 14806 (syz.4.3934) did not claim interface 0 before use [ 269.742275][T14806] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.759146][T14801] loop3: detected capacity change from 128 to 64 [ 269.766038][T14808] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Out of memory [ 269.776976][T14808] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Out of memory [ 269.791772][T14808] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #13: comm syz.3.3935: mark_inode_dirty error [ 269.803773][T14808] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 269.956380][T10464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.034650][T10743] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.050404][ T9371] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.201388][ T9371] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.409824][ T29] audit: type=1400 audit(4887.246:20749): avc: denied { getopt } for pid=14821 comm="syz.7.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.693436][ T9371] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.791009][ T9371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.066089][ T9371] bond0 (unregistering): Released all slaves [ 271.222499][ T9371] tipc: Left network mode [ 271.308617][ T9371] hsr_slave_0: left promiscuous mode [ 271.330981][ T9371] hsr_slave_1: left promiscuous mode [ 271.339098][ T9371] batman_adv: batadv0: Removing interface: team0 [ 271.354591][ T9371] veth1_macvtap: left promiscuous mode [ 271.360619][ T9371] veth0_macvtap: left promiscuous mode [ 271.366221][ T9371] veth1_vlan: left promiscuous mode [ 271.371610][ T9371] veth0_vlan: left promiscuous mode [ 271.413693][ T9371] pim6reg (unregistering): left allmulticast mode [ 271.501066][T14842] chnl_net:caif_netlink_parms(): no params data found [ 271.595428][T14842] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.602653][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.613732][ T3601] IPVS: starting estimator thread 0... [ 271.633701][T14842] bridge_slave_0: entered allmulticast mode [ 271.654078][T14842] bridge_slave_0: entered promiscuous mode [ 271.679464][T14842] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.686543][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.709103][T14932] IPVS: using max 2832 ests per chain, 141600 per kthread [ 271.719286][T14842] bridge_slave_1: entered allmulticast mode [ 271.725891][T14842] bridge_slave_1: entered promiscuous mode [ 271.776364][T14842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.794928][T14842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.812996][T14954] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3991'. [ 271.855888][T14842] team0: Port device team_slave_0 added [ 271.868649][T14842] team0: Port device team_slave_1 added [ 271.897983][T14842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.904995][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.930979][T14842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.951674][T14842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.958671][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.984708][T14842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.989645][ T29] audit: type=1400 audit(4888.966:20750): avc: denied { ioctl } for pid=14972 comm="syz.4.3999" path="socket:[56902]" dev="sockfs" ino=56902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.056070][T14842] hsr_slave_0: entered promiscuous mode [ 272.063664][T14842] hsr_slave_1: entered promiscuous mode [ 272.097779][T14990] loop4: detected capacity change from 0 to 512 [ 272.140603][T14990] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 272.155459][T14842] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 272.165331][T14842] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 272.175277][T14842] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 272.184785][T14842] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 272.195391][T14990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 272.203788][T14990] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.4005: bad orphan inode 15 [ 272.214592][T14990] ext4_test_bit(bit=14, block=18) = 1 [ 272.220028][T14990] is_bad_inode(inode)=0 [ 272.224225][T14990] NEXT_ORPHAN(inode)=1023 [ 272.228560][T14990] max_ino=32 [ 272.231780][T14990] i_nlink=0 [ 272.236193][T14990] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.4005: corrupted xattr block 19: e_value size too large [ 272.252814][T14990] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 272.262297][T14990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 272.417403][T14842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.430200][T14842] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.439351][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.446414][ T9371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.589963][T14842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.600356][T14842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.792120][T14842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.829768][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.832413][T15008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.836932][ T9371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.879186][T15008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.997158][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.055071][T14842] veth0_vlan: entered promiscuous mode [ 273.075658][T14842] veth1_vlan: entered promiscuous mode [ 273.103020][T14842] veth0_macvtap: entered promiscuous mode [ 273.114650][T14842] veth1_macvtap: entered promiscuous mode [ 273.135828][T14842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.159687][T14842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.169230][T14842] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.178056][T14842] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.186900][T14842] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.195726][T14842] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.347115][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.370298][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.457870][T15083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.467360][T15083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.752082][T15108] usb usb1: usbfs: process 15108 (syz.8.4048) did not claim interface 0 before use [ 273.761987][T15108] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.990861][ T29] audit: type=1400 audit(4890.976:20751): avc: denied { bind } for pid=15133 comm="syz.2.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.157398][T15140] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 274.526507][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.535432][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.824984][T15168] loop4: detected capacity change from 0 to 256 [ 274.848928][T15168] FAT-fs (loop4): IO charset cp865 not found [ 274.947642][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 275.092002][ T29] audit: type=1400 audit(4892.076:20752): avc: denied { map } for pid=15206 comm="syz.8.4092" path="socket:[58698]" dev="sockfs" ino=58698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 275.130243][T15211] loop8: detected capacity change from 0 to 128 [ 275.173954][ T29] audit: type=1400 audit(4892.156:20753): avc: denied { bind } for pid=15215 comm="syz.7.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.193050][ T29] audit: type=1400 audit(4892.156:20754): avc: denied { node_bind } for pid=15215 comm="syz.7.4096" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 275.214720][T15211] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.238792][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 275.254619][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 275.270853][T14842] EXT4-fs error (device loop8): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 275.270868][ T29] audit: type=1400 audit(4892.256:20755): avc: denied { rmdir } for pid=14842 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.284281][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 275.322852][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 275.337804][T15223] netlink: 'syz.1.4093': attribute type 3 has an invalid length. [ 275.364619][T14842] EXT4-fs error (device loop8): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 275.379464][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 275.396031][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 275.412138][T14842] EXT4-fs error (device loop8): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 275.454452][T15226] loop7: detected capacity change from 0 to 128 [ 275.462823][T14842] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 275.521602][T15226] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.779990][T15229] netlink: 'syz.7.4100': attribute type 4 has an invalid length. [ 276.120321][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.128881][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.321802][T10464] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.433566][T15248] loop7: detected capacity change from 0 to 128 [ 276.441609][T15248] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.463508][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 276.477954][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 276.492420][T10464] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 276.505575][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 276.519904][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 276.534015][T10464] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 276.547106][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 276.561297][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 276.576079][T10464] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 276.589649][T10464] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 276.655608][ T29] audit: type=1400 audit(4893.636:20756): avc: denied { setopt } for pid=15250 comm="syz.1.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.697648][T15040] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.748212][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 276.790740][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4121'. [ 276.917825][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4129'. [ 277.055226][T15316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.063900][T15316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.093369][T15290] chnl_net:caif_netlink_parms(): no params data found [ 277.135104][T15290] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.142217][T15290] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.149465][T15290] bridge_slave_0: entered allmulticast mode [ 277.155793][T15290] bridge_slave_0: entered promiscuous mode [ 277.162589][T15290] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.169705][T15290] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.176949][T15290] bridge_slave_1: entered allmulticast mode [ 277.183295][T15290] bridge_slave_1: entered promiscuous mode [ 277.199478][T15290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.209601][T15290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.228104][T15290] team0: Port device team_slave_0 added [ 277.232816][T14842] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.234853][T15290] team0: Port device team_slave_1 added [ 277.257594][ T3426] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.273109][T15316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.287144][T15316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.302024][T15290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.309163][T15290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.335210][T15290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.346610][T15290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.353620][T15290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.379879][T15290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.394276][ T3426] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.432771][T15290] hsr_slave_0: entered promiscuous mode [ 277.439427][T15290] hsr_slave_1: entered promiscuous mode [ 277.452032][T15290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.459863][T15290] Cannot create hsr debugfs directory [ 277.471108][ T3426] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.530799][ T3426] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.588116][T15335] chnl_net:caif_netlink_parms(): no params data found [ 277.620627][ T3426] bridge_slave_1: left allmulticast mode [ 277.626295][ T3426] bridge_slave_1: left promiscuous mode [ 277.632064][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.640201][ T3426] bridge_slave_0: left allmulticast mode [ 277.645865][ T3426] bridge_slave_0: left promiscuous mode [ 277.651621][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.721635][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.731565][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.741120][ T3426] bond0 (unregistering): Released all slaves [ 277.773296][T15290] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 277.782309][T15290] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 277.790905][T15335] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.798027][T15335] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.805774][T15335] bridge_slave_0: entered allmulticast mode [ 277.812506][T15335] bridge_slave_0: entered promiscuous mode [ 277.819163][T15290] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 277.828226][T15335] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.835307][T15335] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.843727][T15335] bridge_slave_1: entered allmulticast mode [ 277.850258][T15335] bridge_slave_1: entered promiscuous mode [ 277.870507][T15290] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 277.881846][ T3426] hsr_slave_0: left promiscuous mode [ 277.887355][ T3426] hsr_slave_1: left promiscuous mode [ 277.892968][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.900414][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.907857][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.915428][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.926767][ T3426] veth1_macvtap: left promiscuous mode [ 277.933045][ T3426] veth0_macvtap: left promiscuous mode [ 277.938624][ T3426] veth1_vlan: left promiscuous mode [ 277.944014][ T3426] veth0_vlan: left promiscuous mode [ 278.024381][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 278.035237][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 278.116526][T15335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.175128][T15290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.206202][T15335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.226215][T15290] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.238121][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.245230][ T9371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.262891][T15335] team0: Port device team_slave_0 added [ 278.270538][T15335] team0: Port device team_slave_1 added [ 278.277423][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.284510][ T9371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.305213][T15335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.312239][T15335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.338390][T15335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.344218][T15379] loop4: detected capacity change from 0 to 1024 [ 278.374942][T15379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.378229][T15384] syz_tun: entered allmulticast mode [ 278.392335][T15379] Trying to write to read-only block-device loop4 [ 278.393227][T15335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.405829][T15335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.419129][ T29] audit: type=1400 audit(4895.396:20757): avc: denied { unlink } for pid=12200 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 278.432120][T15335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.465345][ T29] audit: type=1400 audit(4895.446:20758): avc: denied { unlink } for pid=12200 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.489688][T12200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.499365][T15383] syz_tun: left allmulticast mode [ 278.506695][T15335] hsr_slave_0: entered promiscuous mode [ 278.512877][T15335] hsr_slave_1: entered promiscuous mode [ 278.555537][T15290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.735601][T15408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4160'. [ 278.839302][T15398] netlink: 'syz.2.4160': attribute type 12 has an invalid length. [ 278.864362][T15423] loop4: detected capacity change from 0 to 128 [ 278.884955][T15290] veth0_vlan: entered promiscuous mode [ 278.914906][T15290] veth1_vlan: entered promiscuous mode [ 278.931789][T15290] veth0_macvtap: entered promiscuous mode [ 278.940992][T15290] veth1_macvtap: entered promiscuous mode [ 278.952164][T15290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.965736][T15290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.976151][T15290] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.984907][T15290] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.993662][T15290] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.002389][T15290] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.062275][T15335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.066298][T15434] nftables ruleset with unbound chain [ 279.081055][T15335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.098259][T15335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.108954][T15335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.201293][T15335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.216319][T15335] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.228213][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.235373][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.276036][T15335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.286532][T15335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.395079][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.402199][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.456900][T15458] loop9: detected capacity change from 0 to 128 [ 279.466847][T15458] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.486535][T15335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.512056][T15290] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.583871][T15335] veth0_vlan: entered promiscuous mode [ 279.596015][T15335] veth1_vlan: entered promiscuous mode [ 279.614710][T15335] veth0_macvtap: entered promiscuous mode [ 279.622789][T15335] veth1_macvtap: entered promiscuous mode [ 279.635092][T15335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.665239][T15335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.679267][T15335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.688092][T15335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.696976][T15335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.705794][T15335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.817220][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4188'. [ 279.834838][T15499] loop4: detected capacity change from 0 to 128 [ 279.908093][T15515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 280.323331][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 280.393825][T15541] loop2: detected capacity change from 0 to 128 [ 280.418157][T15541] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.454805][ T23] IPVS: starting estimator thread 0... [ 280.462108][T15542] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.477860][T12339] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.579368][T15545] IPVS: using max 2496 ests per chain, 124800 per kthread [ 280.760355][T15556] netem: change failed [ 281.126775][ T29] audit: type=1400 audit(4897.756:20759): avc: denied { getopt } for pid=15550 comm="syz.0.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 281.328013][T15571] netlink: 312 bytes leftover after parsing attributes in process `syz.9.4218'. [ 281.360318][ T29] audit: type=1400 audit(4898.336:20760): avc: denied { ioctl } for pid=15574 comm="syz.9.4220" path="socket:[60113]" dev="sockfs" ino=60113 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 281.379773][T15575] syzkaller0: entered promiscuous mode [ 281.390380][T15575] syzkaller0: entered allmulticast mode [ 281.559804][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.578462][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.598041][T15597] loop2: detected capacity change from 0 to 1024 [ 281.600769][ T29] audit: type=1400 audit(4898.586:20761): avc: denied { bind } for pid=15596 comm="syz.4.4230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.647297][T15597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.687201][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.917980][T15616] netem: change failed [ 282.489964][ T29] audit: type=1400 audit(4899.476:20762): avc: denied { unmount } for pid=12200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 282.524535][T15627] tipc: Enabled bearer , priority 0 [ 282.539216][T15627] syzkaller0: entered promiscuous mode [ 282.544733][T15627] syzkaller0: entered allmulticast mode [ 282.603235][T15627] tipc: Resetting bearer [ 282.612266][T15625] tipc: Resetting bearer [ 282.623761][T15625] tipc: Disabling bearer [ 282.633201][ T29] audit: type=1400 audit(4899.616:20763): avc: denied { ioctl } for pid=15634 comm="syz.0.4245" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 282.654327][T15636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4239'. [ 282.679180][T15623] netlink: 'syz.2.4239': attribute type 12 has an invalid length. [ 282.748811][ T3392] IPVS: starting estimator thread 0... [ 282.794783][T15648] loop2: detected capacity change from 0 to 1024 [ 282.801616][T15648] EXT4-fs: Ignoring removed oldalloc option [ 282.807550][T15648] EXT4-fs: Ignoring removed bh option [ 282.822368][T15648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.839158][T15643] IPVS: using max 2352 ests per chain, 117600 per kthread [ 283.303171][T15681] loop0: detected capacity change from 0 to 1024 [ 283.321627][T15681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.352254][T15335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.435115][ T29] audit: type=1400 audit(4900.416:20764): avc: denied { mount } for pid=15686 comm="syz.0.4265" name="/" dev="configfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 283.582892][T15695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.591663][T15695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.761094][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.779746][ T29] audit: type=1400 audit(4900.656:20765): avc: denied { setattr } for pid=15686 comm="syz.0.4265" name="/" dev="configfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 283.817166][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.927679][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.976652][T15704] loop2: detected capacity change from 0 to 512 [ 283.990783][T15704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.014414][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.370073][ T29] audit: type=1400 audit(4901.316:20766): avc: denied { unmount } for pid=15335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 284.564367][T15728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 284.642950][T15735] loop0: detected capacity change from 0 to 512 [ 284.662624][T15735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.698817][T15335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.050637][ T29] audit: type=1400 audit(4902.026:20767): avc: denied { mounton } for pid=15746 comm="syz.1.4288" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 285.298326][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4294'. [ 285.318019][T15767] loop0: detected capacity change from 0 to 512 [ 285.322704][T15769] loop9: detected capacity change from 0 to 512 [ 285.332235][T15769] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.4297: casefold flag without casefold feature [ 285.346671][T15769] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.4297: couldn't read orphan inode 15 (err -117) [ 285.349161][T15767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.364978][T15769] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.389522][T15769] syz_tun: entered allmulticast mode [ 285.398255][T15769] dvmrp1: entered allmulticast mode [ 285.416907][T15768] syz_tun: left allmulticast mode [ 285.419555][T15335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.437299][T15780] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.447447][T15290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.517298][T15796] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4308'. [ 285.550415][T15801] netlink: 'syz.9.4310': attribute type 12 has an invalid length. [ 285.582193][T15805] loop9: detected capacity change from 0 to 512 [ 285.600808][T15805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.622846][T15290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.824136][ T29] audit: type=1400 audit(4902.806:20768): avc: denied { write } for pid=15811 comm="syz.9.4314" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.184152][T15833] loop2: detected capacity change from 0 to 512 [ 286.210870][T15833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.233106][T12339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.551377][T15863] loop9: detected capacity change from 0 to 512 [ 286.561721][T15863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.586717][T15290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.641856][T15872] loop9: detected capacity change from 0 to 1024 [ 286.648692][T15872] EXT4-fs: Ignoring removed oldalloc option [ 286.654724][T15872] EXT4-fs: Ignoring removed bh option [ 286.671430][T15872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.739755][T15875] ================================================================== [ 286.747856][T15875] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 286.755757][T15875] [ 286.758078][T15875] write to 0xffff88811a1d6008 of 4 bytes by task 15872 on cpu 1: [ 286.765798][T15875] __mark_inode_dirty+0x10a/0x760 [ 286.770830][T15875] vfs_fsync_range+0xd4/0x130 [ 286.775524][T15875] ext4_buffered_write_iter+0x34f/0x3c0 [ 286.781070][T15875] ext4_file_write_iter+0x383/0xf00 [ 286.786268][T15875] iter_file_splice_write+0x5f2/0x970 [ 286.791734][T15875] direct_splice_actor+0x153/0x2a0 [ 286.796862][T15875] splice_direct_to_actor+0x30f/0x680 [ 286.802250][T15875] do_splice_direct+0xda/0x150 [ 286.807024][T15875] do_sendfile+0x380/0x650 [ 286.811446][T15875] __x64_sys_sendfile64+0x105/0x150 [ 286.816660][T15875] x64_sys_call+0xb39/0x2fb0 [ 286.821258][T15875] do_syscall_64+0xd2/0x200 [ 286.825766][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.831671][T15875] [ 286.833996][T15875] read to 0xffff88811a1d6008 of 4 bytes by task 15875 on cpu 0: [ 286.841626][T15875] __mark_inode_dirty+0x52/0x760 [ 286.846577][T15875] vfs_fsync_range+0xd4/0x130 [ 286.851268][T15875] ext4_buffered_write_iter+0x34f/0x3c0 [ 286.856823][T15875] ext4_file_write_iter+0x383/0xf00 [ 286.862024][T15875] iter_file_splice_write+0x5f2/0x970 [ 286.867406][T15875] direct_splice_actor+0x153/0x2a0 [ 286.872536][T15875] splice_direct_to_actor+0x30f/0x680 [ 286.877921][T15875] do_splice_direct+0xda/0x150 [ 286.882694][T15875] do_sendfile+0x380/0x650 [ 286.887110][T15875] __x64_sys_sendfile64+0x105/0x150 [ 286.892315][T15875] x64_sys_call+0xb39/0x2fb0 [ 286.896914][T15875] do_syscall_64+0xd2/0x200 [ 286.901413][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.907310][T15875] [ 286.909625][T15875] value changed: 0x00000820 -> 0x00000028 [ 286.915331][T15875] [ 286.917646][T15875] Reported by Kernel Concurrency Sanitizer on: [ 286.923807][T15875] CPU: 0 UID: 0 PID: 15875 Comm: syz.9.4337 Tainted: G W 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 286.937886][T15875] Tainted: [W]=WARN [ 286.941684][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.951750][T15875] ================================================================== [ 287.324941][T15875] ================================================================== [ 287.333062][T15875] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 287.340448][T15875] [ 287.342760][T15875] write to 0xffff88811a1d60f4 of 4 bytes by task 15872 on cpu 0: [ 287.350468][T15875] xas_set_mark+0x12b/0x140 [ 287.354977][T15875] __folio_start_writeback+0x1dd/0x440 [ 287.360439][T15875] ext4_bio_write_folio+0x5ad/0x9f0 [ 287.365651][T15875] mpage_submit_folio+0xe4/0x170 [ 287.370588][T15875] mpage_process_page_bufs+0x39b/0x4a0 [ 287.376058][T15875] mpage_prepare_extent_to_map+0x741/0xaa0 [ 287.381875][T15875] ext4_do_writepages+0xa1a/0x21c0 [ 287.386985][T15875] ext4_writepages+0x176/0x300 [ 287.391758][T15875] do_writepages+0x1c3/0x310 [ 287.396351][T15875] file_write_and_wait_range+0x156/0x2c0 [ 287.401993][T15875] generic_buffers_fsync_noflush+0x45/0x120 [ 287.407899][T15875] ext4_sync_file+0x1ab/0x690 [ 287.412583][T15875] vfs_fsync_range+0x10d/0x130 [ 287.417362][T15875] ext4_buffered_write_iter+0x34f/0x3c0 [ 287.422909][T15875] ext4_file_write_iter+0x383/0xf00 [ 287.428117][T15875] iter_file_splice_write+0x5f2/0x970 [ 287.433507][T15875] direct_splice_actor+0x153/0x2a0 [ 287.438630][T15875] splice_direct_to_actor+0x30f/0x680 [ 287.444016][T15875] do_splice_direct+0xda/0x150 [ 287.448794][T15875] do_sendfile+0x380/0x650 [ 287.453215][T15875] __x64_sys_sendfile64+0x105/0x150 [ 287.458421][T15875] x64_sys_call+0xb39/0x2fb0 [ 287.463009][T15875] do_syscall_64+0xd2/0x200 [ 287.467506][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.473413][T15875] [ 287.475737][T15875] read to 0xffff88811a1d60f4 of 4 bytes by task 15875 on cpu 1: [ 287.483360][T15875] ext4_do_writepages+0xea/0x21c0 [ 287.488401][T15875] ext4_writepages+0x176/0x300 [ 287.493180][T15875] do_writepages+0x1c3/0x310 [ 287.497769][T15875] file_write_and_wait_range+0x156/0x2c0 [ 287.503419][T15875] generic_buffers_fsync_noflush+0x45/0x120 [ 287.509324][T15875] ext4_sync_file+0x1ab/0x690 [ 287.514003][T15875] vfs_fsync_range+0x10d/0x130 [ 287.518778][T15875] ext4_buffered_write_iter+0x34f/0x3c0 [ 287.524332][T15875] ext4_file_write_iter+0x383/0xf00 [ 287.529538][T15875] iter_file_splice_write+0x5f2/0x970 [ 287.534922][T15875] direct_splice_actor+0x153/0x2a0 [ 287.540042][T15875] splice_direct_to_actor+0x30f/0x680 [ 287.545417][T15875] do_splice_direct+0xda/0x150 [ 287.550187][T15875] do_sendfile+0x380/0x650 [ 287.554610][T15875] __x64_sys_sendfile64+0x105/0x150 [ 287.559815][T15875] x64_sys_call+0xb39/0x2fb0 [ 287.564408][T15875] do_syscall_64+0xd2/0x200 [ 287.568921][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.574818][T15875] [ 287.577152][T15875] value changed: 0x0a000021 -> 0x04000021 [ 287.582859][T15875] [ 287.585180][T15875] Reported by Kernel Concurrency Sanitizer on: [ 287.591330][T15875] CPU: 1 UID: 0 PID: 15875 Comm: syz.9.4337 Tainted: G W 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 287.605414][T15875] Tainted: [W]=WARN [ 287.609206][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.619264][T15875] ================================================================== [ 287.647386][T15290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.