last executing test programs: 6.393327944s ago: executing program 3 (id=413): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x33b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="400b5c0000005c21fb4ebe973e29bf8665"], 0x0}, 0x0) 5.486819757s ago: executing program 3 (id=417): r0 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 3.98170628s ago: executing program 3 (id=424): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008600699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6", 0x90}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.567808161s ago: executing program 2 (id=426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x800080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x45f, &(0x7f0000000900)="$eJzs28tvG0UYAPBvN4++iSnl0QcQKIiIR9K0BXrgAAgkDkVCggMcoyStSt0GNUFqqwpahMoJISTuiCP/Aie4IMQJiSvcUaUK9dKWk9F6dxvHtd0kteOCfz9pk5nd2Z35vDv27I4dwMAaz/4kEdsj4o+IGMuzKwuM5/9uXLswe/PahdkkarV3/07q5a5fuzBbFi3321ZkJtKI9PMk9raod/Hc+ZMz1er8mSI/tXTqo6nFc+dfOHFq5vj88fnTB48cOXxo+uWXDr7YlTizNl3f88nCvt1vffD120e/zNaNlvE3xdEl4502Pl2rdbm6/trRkE6G+9gQ1mQoIrLTNVLv/2MxFMsnbyze/KyvjQN6qlar1ba133yxBvyPbW14J8jo8jAoyg/67P63XJoHAa/2ZuhxT7j6Wn4DlMV9o1jyLcORFmVGmu5vu2k8It6/+M+32RK9eQ4BALDCj9n45/lW4780Hmood18xN1SJiPsjYmdEPBARuyLiwYh62Ycj4pE11t88SXL7+Ce9sq7AVikb/71SzG2tHP+Vo7+oDBW5HfX4R5JjJ6rzB4rXZCJGNmX56Q51/PTG71+129Y4/suWrP5yLFi048rwppX7zM0szdxNzI2uXorYM9wq/uTWTEASEbsjYs866zjx7Pf72m27c/wddGGeqfZdxDP5+b8YTfGXks7zk1Obozp/YKq8Km7362+X32lX/13F3wXZ+d/a8vq/FX8laZyvXVx7HZf//KLtPc0qr/9K4z7Z9T+avFdPjxbrzs4sLZ2ZjhhNjuaNblx/cHnfMl+Wz+Kf2N+6/++M5Vdib0RkF/GjEfFYRDxetP2JiHgyIvZ3iP+X15/6cP3x91YW/9yazv9yYjSa17RODJ38+YcVlVZui/9m5/N/uJ6aKNas5v1vNe1a39UMAAAA/z1pRGyPJJ28lU7Tycn8+/K7ItLqwuLSc8cWPj49l/9GoBIjafmka6zheeh0cVuf5y9FRP7VgnL7oeK58TdDW+r5ydmF6ly/g4cBt61N/8/8NdTv1gE95/daMLj0fxhc+j8Mrtb9f8uGtwPYeC36v84PA6LV5/+nfWgHsPGa+r9pPxggnv/B4NL/YXDp/zCQFrfEnX8k3zFRHmmdu3dKDJ/ND939I29AIkbuiWbkic3dP3Kk90BcEj1L9PFNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIv+DQAA///U99eV") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.448700033s ago: executing program 3 (id=428): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 2.255979996s ago: executing program 2 (id=432): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.219358736s ago: executing program 2 (id=433): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{0x0}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) read(r0, &(0x7f0000000240)=""/233, 0xe9) write(r2, 0x0, 0x0) 1.633803626s ago: executing program 1 (id=434): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 1.575609647s ago: executing program 1 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1.565533457s ago: executing program 1 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1.422825159s ago: executing program 4 (id=438): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008600699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6", 0x90}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.422535099s ago: executing program 4 (id=439): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f00000002c0)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000800)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48b462428087ed4460", 0xda}, {&(0x7f0000002680)}, {&(0x7f0000000900)="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", 0x1d6}, {&(0x7f0000000480)="f96e37f854b1c8bab0a14a54ede5956395e4f1611c3507390ed2823505121893595c16d47e5f6d727645a8d84cce2769e894ec7c8049e26dcf9fc0e674a5b68872502d7f5ff0cc87a9ebde8d4dd841323ddd341daa6edb0a2df1e1375dfe6d36d8ad3b018df23e3a42ee7caa30e47d68a3483a9a7a2dc8fe42530b50d8fc56d460e108f5b89a302e07e3df52ffcd55b7ec9416730dad7d35f3f2be7917542c4b73537716bd09e33f79a2be49bf38257d235c1ebdffd936eaf1dfcd3c4355e171a32d553973e43f720aba1b26e2759282fce689b46920", 0xd6}, {&(0x7f0000000140)="3fde6fec2902290f997028", 0xb}], 0x5}, 0x0) 1.422353459s ago: executing program 4 (id=440): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xff) 1.35989679s ago: executing program 4 (id=441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x58c, &(0x7f0000000280)="$eJzs3c9rHOUbAPBnNkmb/vh+k0Ip6kECPVip3TSJPyp4qCcRLRb0XpdkG0o23ZLdlCYWbA/24kWKIGJB9O7dY/Hqwb+ioIUiJejBS2Q2s+ma7KSbdNNsu58PTPu+M7N532dnnnff2dllA+hbY+k/hYgXI+KrJGKkZdtgZBvH1vZbeXh9Ol2SWF39+M8kkmxdc/8k+/9QVnkhIn75IuJkYXO7taXluVKlUl7I6uP1+SvjtaXlU5fmS7Pl2fLlyampM29MTb791ptdi/XV839/+9Hd9898eXzlm5/uH7mdxNk4nG1rjeMJ3GitjMVY9pwMxdkNO050obFekux1B9iRgSzPhyIdA0ZiIMv6tlZHnmbXgF32eZrWQJ9K5D/0qeY8oHlt36Xr4GfGg3fXLoA2xz+49t5IDDeujQ6uJP+5Mkqvd0e70H7axs9/3LmdLpH3PsT+LjQEsMGNmxFxenBw8/iXZOPfzp3uYJ+NbfTb6w/spbvp/Oe1dvOfwvr8J9rMfw61yd2deHz+F+53oZlc6fzvnbbz3/WbVqMDWe1/jTnfUHLxUqWcjm3/j4gTMbQ/rU9ExHvtb4J8Wli5t5rXfuv8L13S9ptzwawf9wc3zP9mSvXSk0e+5sHNiJfazn+T9eOftDn+6fNxvsM2jpXvvJy37fHx767VHyJeaXv8Hx3MZOv7k+ON82G8eVZs9tetY7/ltb/X8afH/2Aa/4Hc+EeT1vu1te238f3wP+W8bTs9//clnzTK+7J110r1+sJExL7kw83rJx89tllv7p/Gf+L41uNfu/P/QJrYHcZ/6+it1l2Htxf/7krjn9n6/N9w/LdfuPfBZ9/ltd/Z8X+9UTqRrelk/Ou0g0/y3AEAAAAAAECvKUTE4UgKxfVyoVAsrn2+42gcLFSqtfrJi9XFyzPR+K7saAwVmne6R1o+DzGRfR62WZ/cUJ+KiCMR8fXAgUa9OF2tzOx18AAAAAAAAAAAAAAAAAAAANAjDkUMt/v+f+r3gfaPyVkNPIu2+Mlv4DmXn//Zlm780hPQk7z+Q/+S/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0r+3k/4/ndrEjAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hw4f+5cuqyuPLw+ndZnri4tzlWvnpop1+aK84vTxenqwpXibLU6WykXp6vzj/t7lWr1ysRkLF4br5dr9fHa0vKF+eri5fqFS/Ol2fKF8tBTiQoAAAAAAAAAAAAAAAAAAACeLbWl5blSpVJeUOhuIUkieqAbu18Y7I1u9GCh0BvdyC/sj4jcfVpHiV9P790IBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR/wYAAP//SNM3tA==") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x62042, 0x113) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="1228fa", 0x3}], 0x1, 0xcfbc, 0x3, 0x0) sendfile(r1, r1, 0x0, 0x7a680003) 1.33366848s ago: executing program 4 (id=442): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) chroot(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) r5 = gettid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.3315239s ago: executing program 1 (id=443): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.267537031s ago: executing program 1 (id=445): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 1.215946602s ago: executing program 2 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1.188895942s ago: executing program 1 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000fc0)=[{0x0}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001180)=ANY=[@ANYBLOB="000000004c900200090000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000090000000000000002000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001eeddddd00"/716]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") 1.096552404s ago: executing program 3 (id=448): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xc8, 0x10001, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0xe}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)=ANY=[@ANYBLOB="020000000100020000000000040005008cffffff1000010000ff0f002000000000"], 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xa1005c, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 1.050011685s ago: executing program 2 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 984.002105ms ago: executing program 0 (id=451): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x3bc0, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) 931.798056ms ago: executing program 0 (id=452): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001cc0), 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000fc0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000000001c3c0020010000000000000040000000000002fe8000000000000000000000000000aa33"], 0x0) 676.89776ms ago: executing program 2 (id=453): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000040000b70800000000e7057b83f80000000000bfa200400000000007020000f8ffffffb703000008000000b70400000000826bb969d3a34bc73e06630542f60000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 575.834592ms ago: executing program 0 (id=454): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 448.330984ms ago: executing program 0 (id=455): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 235.749617ms ago: executing program 3 (id=456): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) read(r0, &(0x7f0000000240)=""/233, 0xe9) write(r2, 0x0, 0x0) 234.794537ms ago: executing program 0 (id=457): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 131.454598ms ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @ldst={0x2, 0x2, 0x3, 0x0, 0x7, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0xa86, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 4 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 35.286626][ T29] audit: type=1400 audit(1749510559.898:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.287874][ T3299] cgroup: Unknown subsys name 'net' [ 35.309393][ T29] audit: type=1400 audit(1749510559.908:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.336854][ T29] audit: type=1400 audit(1749510559.928:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.537388][ T3299] cgroup: Unknown subsys name 'cpuset' [ 35.543693][ T3299] cgroup: Unknown subsys name 'rlimit' [ 35.715389][ T29] audit: type=1400 audit(1749510560.328:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.738708][ T29] audit: type=1400 audit(1749510560.338:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.759259][ T29] audit: type=1400 audit(1749510560.338:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.771170][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.779676][ T29] audit: type=1400 audit(1749510560.338:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.808591][ T29] audit: type=1400 audit(1749510560.338:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.822819][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.833400][ T29] audit: type=1400 audit(1749510560.338:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.865636][ T29] audit: type=1400 audit(1749510560.408:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.178308][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 37.247132][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.288399][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.299494][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.306750][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.313999][ T3309] bridge_slave_0: entered allmulticast mode [ 37.320574][ T3309] bridge_slave_0: entered promiscuous mode [ 37.327498][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.334607][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.342126][ T3309] bridge_slave_1: entered allmulticast mode [ 37.348790][ T3309] bridge_slave_1: entered promiscuous mode [ 37.415023][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.430094][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.439277][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.446389][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.453683][ T3314] bridge_slave_0: entered allmulticast mode [ 37.460272][ T3314] bridge_slave_0: entered promiscuous mode [ 37.469386][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.476475][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.483711][ T3314] bridge_slave_1: entered allmulticast mode [ 37.490139][ T3314] bridge_slave_1: entered promiscuous mode [ 37.506504][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.533018][ T3309] team0: Port device team_slave_0 added [ 37.555978][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.568447][ T3309] team0: Port device team_slave_1 added [ 37.575427][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.601662][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.615762][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.622967][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.630414][ T3311] bridge_slave_0: entered allmulticast mode [ 37.636795][ T3311] bridge_slave_0: entered promiscuous mode [ 37.653666][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.660683][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.686707][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.702671][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.709876][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.717083][ T3311] bridge_slave_1: entered allmulticast mode [ 37.723772][ T3311] bridge_slave_1: entered promiscuous mode [ 37.740193][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.747238][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.773334][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.802116][ T3314] team0: Port device team_slave_0 added [ 37.808888][ T3314] team0: Port device team_slave_1 added [ 37.828001][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.835177][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.842661][ T3320] bridge_slave_0: entered allmulticast mode [ 37.849104][ T3320] bridge_slave_0: entered promiscuous mode [ 37.866267][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.873378][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.899335][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.916017][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.925411][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.932599][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.939848][ T3320] bridge_slave_1: entered allmulticast mode [ 37.946288][ T3320] bridge_slave_1: entered promiscuous mode [ 37.958334][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.965322][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.991456][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.002435][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.009583][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.016919][ T3319] bridge_slave_0: entered allmulticast mode [ 38.023519][ T3319] bridge_slave_0: entered promiscuous mode [ 38.031261][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.058133][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.065245][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.072528][ T3319] bridge_slave_1: entered allmulticast mode [ 38.079151][ T3319] bridge_slave_1: entered promiscuous mode [ 38.091475][ T3311] team0: Port device team_slave_0 added [ 38.104103][ T3309] hsr_slave_0: entered promiscuous mode [ 38.110243][ T3309] hsr_slave_1: entered promiscuous mode [ 38.122479][ T3311] team0: Port device team_slave_1 added [ 38.129372][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.139855][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.175442][ T3320] team0: Port device team_slave_0 added [ 38.182389][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.197717][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.204696][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.230714][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.261064][ T3320] team0: Port device team_slave_1 added [ 38.269618][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.279081][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.286043][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.312092][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.325075][ T3314] hsr_slave_0: entered promiscuous mode [ 38.331360][ T3314] hsr_slave_1: entered promiscuous mode [ 38.337237][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.344794][ T3314] Cannot create hsr debugfs directory [ 38.383128][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.390159][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.416242][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.444746][ T3311] hsr_slave_0: entered promiscuous mode [ 38.451266][ T3311] hsr_slave_1: entered promiscuous mode [ 38.457395][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.465018][ T3311] Cannot create hsr debugfs directory [ 38.473363][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.480368][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.506434][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.518312][ T3319] team0: Port device team_slave_0 added [ 38.527751][ T3319] team0: Port device team_slave_1 added [ 38.574596][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.582105][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.608589][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.620292][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.627290][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.653345][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.694198][ T3320] hsr_slave_0: entered promiscuous mode [ 38.700298][ T3320] hsr_slave_1: entered promiscuous mode [ 38.706037][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.713662][ T3320] Cannot create hsr debugfs directory [ 38.771412][ T3319] hsr_slave_0: entered promiscuous mode [ 38.778530][ T3319] hsr_slave_1: entered promiscuous mode [ 38.784316][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.791938][ T3319] Cannot create hsr debugfs directory [ 38.868919][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.891408][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.910366][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.921284][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.948659][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.971993][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.985648][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.000231][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.010618][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.022966][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.035181][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.049034][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.074715][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.090581][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.099701][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.110100][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.151749][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.160974][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.170941][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.190049][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.213287][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.241968][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.258723][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.281250][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.288396][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.298254][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.316352][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.326994][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.339570][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.346734][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.378970][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.389726][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.403198][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.414928][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.422082][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.432300][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.439478][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.457597][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.464877][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.483296][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.493400][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.502703][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.509815][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.524701][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.535122][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.542291][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.554516][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.568201][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.575410][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.584174][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.591308][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.611008][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.618155][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.637440][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.695129][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.708261][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.767633][ T3309] veth0_vlan: entered promiscuous mode [ 39.787862][ T3309] veth1_vlan: entered promiscuous mode [ 39.817824][ T3309] veth0_macvtap: entered promiscuous mode [ 39.832469][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.854380][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.862632][ T3309] veth1_macvtap: entered promiscuous mode [ 39.878720][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.897345][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.908345][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.922615][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.938807][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.947768][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.956774][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.965498][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.045759][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.092422][ T3319] veth0_vlan: entered promiscuous mode [ 40.113981][ T3314] veth0_vlan: entered promiscuous mode [ 40.124530][ T3319] veth1_vlan: entered promiscuous mode [ 40.135092][ T3314] veth1_vlan: entered promiscuous mode [ 40.194132][ T3314] veth0_macvtap: entered promiscuous mode [ 40.204235][ T3319] veth0_macvtap: entered promiscuous mode [ 40.216449][ T3311] veth0_vlan: entered promiscuous mode [ 40.226065][ T3311] veth1_vlan: entered promiscuous mode [ 40.241621][ T3311] veth0_macvtap: entered promiscuous mode [ 40.249109][ T3311] veth1_macvtap: entered promiscuous mode [ 40.261100][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.271605][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.281526][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.290309][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.299166][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307958][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.320503][ T3320] veth0_vlan: entered promiscuous mode [ 40.327301][ T3314] veth1_macvtap: entered promiscuous mode [ 40.348562][ T3320] veth1_vlan: entered promiscuous mode [ 40.358980][ T3319] veth1_macvtap: entered promiscuous mode [ 40.375816][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.398114][ T3320] veth0_macvtap: entered promiscuous mode [ 40.409802][ T3320] veth1_macvtap: entered promiscuous mode [ 40.442357][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.450022][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 40.450038][ T29] audit: type=1400 audit(1749510565.048:100): avc: denied { map_create } for pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.475074][ T29] audit: type=1400 audit(1749510565.048:101): avc: denied { create } for pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.516084][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.531618][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.540542][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.549425][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.558323][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.668828][ T29] audit: type=1400 audit(1749510565.288:102): avc: denied { map_read map_write } for pid=3484 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.756218][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.768885][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.782689][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.799197][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.808031][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816775][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.825516][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.836315][ T29] audit: type=1400 audit(1749510565.448:103): avc: denied { name_bind } for pid=3490 comm="syz.4.8" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.857886][ T29] audit: type=1400 audit(1749510565.448:104): avc: denied { node_bind } for pid=3490 comm="syz.4.8" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.883430][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.892305][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.901079][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.909898][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926432][ T29] audit: type=1400 audit(1749510565.538:105): avc: denied { mounton } for pid=3492 comm="syz.4.9" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.085615][ T3506] loop4: detected capacity change from 0 to 256 [ 41.092137][ T29] audit: type=1400 audit(1749510565.698:106): avc: denied { append } for pid=3504 comm="syz.1.11" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.220144][ T29] audit: type=1400 audit(1749510565.758:107): avc: denied { create } for pid=3508 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.239772][ T29] audit: type=1400 audit(1749510565.758:108): avc: denied { write } for pid=3508 comm="syz.0.12" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.259822][ T29] audit: type=1400 audit(1749510565.758:109): avc: denied { read } for pid=3508 comm="syz.0.12" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.343272][ T3523] loop1: detected capacity change from 0 to 256 [ 41.389423][ T3523] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.423721][ T3529] Zero length message leads to an empty skb [ 41.547581][ T3417] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 41.921186][ T3540] loop1: detected capacity change from 0 to 8192 [ 41.950432][ T3540] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.065016][ T3554] loop3: detected capacity change from 0 to 512 [ 42.080960][ T3554] ======================================================= [ 42.080960][ T3554] WARNING: The mand mount option has been deprecated and [ 42.080960][ T3554] and is ignored by this kernel. Remove the mand [ 42.080960][ T3554] option from the mount to silence this warning. [ 42.080960][ T3554] ======================================================= [ 42.139897][ T3554] EXT4-fs: Ignoring removed nobh option [ 42.215542][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.220574][ T3544] loop0: detected capacity change from 0 to 512 [ 42.263029][ T3565] loop4: detected capacity change from 0 to 512 [ 42.275948][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.293152][ T3544] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.293804][ T3554] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.30: iget: bad i_size value: 15393162788874 [ 42.321824][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.25: corrupted inode contents [ 42.335031][ T3565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.348492][ T3565] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.359625][ T3544] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.25: mark_inode_dirty error [ 42.393372][ T3554] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.30: iget: bad i_size value: 15393162788874 [ 42.439710][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.25: corrupted inode contents [ 42.481105][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.499977][ T3544] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.25: mark_inode_dirty error [ 42.580323][ T3583] tipc: Started in network mode [ 42.585332][ T3583] tipc: Node identity 5e6fefd30f05, cluster identity 4711 [ 42.592927][ T3583] tipc: Enabled bearer , priority 0 [ 42.611838][ T3583] syzkaller0: MTU too low for tipc bearer [ 42.617822][ T3583] tipc: Disabling bearer [ 42.618134][ T3587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.689283][ T3544] syz.0.25 (3544) used greatest stack depth: 10904 bytes left [ 42.704216][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.009715][ T3609] loop0: detected capacity change from 0 to 512 [ 43.022733][ T3609] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 43.097370][ T3585] syz.4.33 (3585) used greatest stack depth: 10560 bytes left [ 43.116723][ T3613] loop1: detected capacity change from 0 to 512 [ 43.242244][ T3621] loop0: detected capacity change from 0 to 512 [ 43.257000][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.280399][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.303060][ T3621] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.805959][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.929163][ T3645] loop0: detected capacity change from 0 to 1024 [ 43.945372][ T3645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.964323][ T3647] vlan2: entered allmulticast mode [ 44.002487][ T3645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.098013][ T3645] ext4: Unknown parameter '' [ 44.175267][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.271355][ T3653] loop2: detected capacity change from 0 to 2048 [ 44.521845][ T3670] syz.2.70 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.485992][ T3686] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 45.495678][ T3684] wg2: entered promiscuous mode [ 45.500697][ T3684] wg2: entered allmulticast mode [ 46.911989][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 46.912007][ T29] audit: type=1400 audit(1749510571.528:904): avc: denied { read write } for pid=3711 comm="syz.4.88" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.941612][ T29] audit: type=1400 audit(1749510571.528:905): avc: denied { open } for pid=3711 comm="syz.4.88" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.978600][ T29] audit: type=1400 audit(1749510571.578:906): avc: denied { ioctl } for pid=3711 comm="syz.4.88" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.003719][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.012263][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.240431][ T3717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'. [ 47.639627][ T29] audit: type=1400 audit(1749510572.218:907): avc: denied { map } for pid=3722 comm="syz.4.91" path="socket:[5388]" dev="sockfs" ino=5388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 47.815503][ T3733] syzkaller0: entered promiscuous mode [ 47.821330][ T3733] syzkaller0: entered allmulticast mode [ 47.872822][ T29] audit: type=1400 audit(1749510572.478:908): avc: denied { relabelfrom } for pid=3736 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.892637][ T29] audit: type=1400 audit(1749510572.478:909): avc: denied { relabelto } for pid=3736 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.912178][ T29] audit: type=1400 audit(1749510572.488:910): avc: denied { read } for pid=3734 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.963219][ T29] audit: type=1400 audit(1749510572.578:911): avc: denied { read } for pid=3744 comm="syz.2.101" dev="nsfs" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.984354][ T29] audit: type=1400 audit(1749510572.578:912): avc: denied { open } for pid=3744 comm="syz.2.101" path="net:[4026532881]" dev="nsfs" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.009027][ T29] audit: type=1400 audit(1749510572.598:913): avc: denied { write } for pid=3744 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.052817][ T3749] loop0: detected capacity change from 0 to 256 [ 48.096364][ T3753] loop4: detected capacity change from 0 to 1024 [ 48.150879][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.195827][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 48.217302][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 48.229672][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.229672][ T12] [ 48.239360][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 48.245375][ T12] EXT4-fs (loop4): Free/Dirty block details [ 48.251330][ T12] EXT4-fs (loop4): free_blocks=68451041280 [ 48.257207][ T12] EXT4-fs (loop4): dirty_blocks=64 [ 48.262375][ T12] EXT4-fs (loop4): Block reservation details [ 48.268407][ T12] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 48.275549][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.341744][ T3772] loop3: detected capacity change from 0 to 128 [ 48.388736][ T3772] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.413552][ T3772] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.520928][ T3784] loop4: detected capacity change from 0 to 128 [ 48.538471][ T3784] EXT4-fs: test_dummy_encryption option not supported [ 48.714886][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 49.208512][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.514191][ T3811] Cannot find add_set index 0 as target [ 50.484022][ T3818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.537972][ T3818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.805256][ T3828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.131'. [ 50.814338][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 52.405444][ T3872] loop4: detected capacity change from 0 to 512 [ 52.430401][ T3872] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.447591][ T3872] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 52.456365][ T3872] EXT4-fs (loop4): 1 truncate cleaned up [ 52.464146][ T3872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.478622][ T3872] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.547516][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.947683][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 52.947717][ T29] audit: type=1400 audit(1749510577.558:920): avc: denied { connect } for pid=3886 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.748003][ T29] audit: type=1400 audit(1749510578.358:921): avc: denied { setopt } for pid=3902 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.256399][ T3927] syzkaller0: entered promiscuous mode [ 54.262075][ T3927] syzkaller0: entered allmulticast mode [ 54.432358][ T3935] wg2: entered promiscuous mode [ 54.437347][ T3935] wg2: entered allmulticast mode [ 54.481844][ T3939] pim6reg1: entered promiscuous mode [ 54.487341][ T3939] pim6reg1: entered allmulticast mode [ 54.501624][ T3941] loop2: detected capacity change from 0 to 1024 [ 54.510774][ T3941] EXT4-fs: Ignoring removed nobh option [ 54.530191][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.561906][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.603718][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.613092][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.671412][ T3954] pim6reg1: entered promiscuous mode [ 54.676820][ T3954] pim6reg1: entered allmulticast mode [ 55.260343][ T3972] loop1: detected capacity change from 0 to 2048 [ 55.312002][ T3972] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.336493][ T3972] EXT4-fs error (device loop1): ext4_lookup:1787: inode #16: comm syz.1.186: iget: bad i_size value: 8796093031208 [ 55.353293][ T3976] loop0: detected capacity change from 0 to 256 [ 55.364560][ T3976] vfat: Bad value for 'fmask' [ 55.371094][ T3314] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 55.373660][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.389250][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.532918][ T3983] loop3: detected capacity change from 0 to 256 [ 56.394884][ T29] audit: type=1400 audit(1749510580.888:922): avc: denied { read } for pid=3982 comm="syz.3.190" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.418050][ T29] audit: type=1400 audit(1749510580.888:923): avc: denied { open } for pid=3982 comm="syz.3.190" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.442074][ T29] audit: type=1400 audit(1749510580.888:924): avc: denied { ioctl } for pid=3982 comm="syz.3.190" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.972101][ T29] audit: type=1400 audit(1749510581.588:925): avc: denied { read } for pid=4002 comm="syz.3.199" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.995249][ T29] audit: type=1400 audit(1749510581.588:926): avc: denied { open } for pid=4002 comm="syz.3.199" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.037285][ T29] audit: type=1400 audit(1749510581.638:927): avc: denied { ioctl } for pid=4002 comm="syz.3.199" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.079241][ T4001] loop4: detected capacity change from 0 to 2048 [ 57.091263][ T4001] ext4: Unknown parameter 'noacl' [ 57.411269][ T29] audit: type=1400 audit(1749510582.028:928): avc: denied { execute } for pid=4019 comm="syz.2.205" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.600266][ T29] audit: type=1400 audit(1749510582.218:929): avc: denied { write } for pid=4024 comm="syz.2.208" name="raw" dev="proc" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.717873][ T4034] loop2: detected capacity change from 0 to 512 [ 57.749782][ T4034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.762862][ T4034] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.809267][ T4041] loop1: detected capacity change from 0 to 128 [ 57.844823][ T4041] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.864004][ T4041] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.196852][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.335573][ T4057] loop3: detected capacity change from 0 to 512 [ 59.402128][ T4052] loop0: detected capacity change from 0 to 1024 [ 59.409011][ T4052] EXT4-fs: Ignoring removed nobh option [ 59.422451][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.454779][ T4052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.490128][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 59.557689][ T4057] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.600544][ T4057] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.718113][ T4057] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.746488][ T4057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 60.030950][ T4057] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.219: corrupted in-inode xattr: e_value size too large [ 60.166538][ T4057] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.219: couldn't read orphan inode 15 (err -117) [ 60.187708][ T4076] pim6reg1: entered promiscuous mode [ 60.193210][ T4076] pim6reg1: entered allmulticast mode [ 60.211319][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.294591][ T4057] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.219: Unrecognised inode hash code 4 [ 60.305941][ T4057] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 60.323917][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 60.323936][ T29] audit: type=1400 audit(1749510584.898:933): avc: denied { create } for pid=4056 comm="syz.3.219" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 60.407410][ T4057] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.219: Unrecognised inode hash code 4 [ 60.418770][ T4057] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 60.523169][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.535147][ T4084] syzkaller0: entered promiscuous mode [ 60.540686][ T4084] syzkaller0: entered allmulticast mode [ 60.654542][ C1] hrtimer: interrupt took 27889 ns [ 60.748845][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.838451][ T29] audit: type=1400 audit(1749510585.448:934): avc: denied { watch } for pid=4089 comm="syz.1.233" path="/38/control" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.884574][ T4102] process 'syz.0.237' launched './file0' with NULL argv: empty string added [ 60.894212][ T29] audit: type=1400 audit(1749510585.508:935): avc: denied { execute_no_trans } for pid=4101 comm="syz.0.237" path="/40/file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.953084][ T4104] pim6reg1: entered promiscuous mode [ 60.958529][ T4104] pim6reg1: entered allmulticast mode [ 61.013742][ T4112] loop2: detected capacity change from 0 to 128 [ 61.026558][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.041958][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.051756][ T4112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.066020][ T4112] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.073587][ T4118] loop3: detected capacity change from 0 to 128 [ 61.959070][ T29] audit: type=1326 audit(1749510586.578:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 61.982496][ T29] audit: type=1326 audit(1749510586.578:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 62.096867][ T29] audit: type=1326 audit(1749510586.628:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 62.120430][ T29] audit: type=1326 audit(1749510586.628:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 62.144082][ T29] audit: type=1326 audit(1749510586.628:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 62.167377][ T29] audit: type=1326 audit(1749510586.628:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 62.190879][ T29] audit: type=1326 audit(1749510586.628:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83908e929 code=0x7ffc0000 [ 62.789122][ T4155] tipc: Started in network mode [ 62.794062][ T4155] tipc: Node identity 7f000001, cluster identity 4711 [ 62.801251][ T4155] tipc: Enabled bearer , priority 10 [ 63.281828][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.497896][ T4170] pim6reg1: entered promiscuous mode [ 63.503310][ T4170] pim6reg1: entered allmulticast mode [ 63.608516][ T4181] bridge2: entered allmulticast mode [ 63.751968][ T4197] loop1: detected capacity change from 0 to 512 [ 63.808984][ T4197] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.822229][ T4197] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.853646][ T4197] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.867733][ T4197] EXT4-fs (loop1): 1 truncate cleaned up [ 63.873965][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.940756][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.989531][ T3417] tipc: Node number set to 2130706433 [ 64.268253][ T4230] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 64.404220][ T4230] syzkaller0: linktype set to 821 [ 64.488543][ T4237] loop1: detected capacity change from 0 to 512 [ 65.103579][ T4250] loop3: detected capacity change from 0 to 256 [ 65.142553][ T4250] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.583295][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.625624][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.648696][ T4289] serio: Serial port ptm0 [ 66.110882][ T4308] netlink: 96 bytes leftover after parsing attributes in process `syz.1.312'. [ 66.185704][ T4314] pim6reg1: entered promiscuous mode [ 66.191190][ T4314] pim6reg1: entered allmulticast mode [ 66.330299][ T4323] veth1_macvtap: left promiscuous mode [ 66.336842][ T4323] macsec0: entered allmulticast mode [ 66.480333][ T4319] bridge_slave_0: left allmulticast mode [ 66.486320][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.538185][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 66.538201][ T29] audit: type=1400 audit(1749510591.158:951): avc: denied { append } for pid=4324 comm="syz.2.321" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.292819][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.302012][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.879761][ T4366] loop2: detected capacity change from 0 to 1024 [ 67.909145][ T4366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.939189][ T4366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.078412][ T4366] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.336: Abort forced by user [ 68.103711][ T4366] EXT4-fs (loop2): Remounting filesystem read-only [ 68.110358][ T4366] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.239321][ T4375] 9pnet_fd: Insufficient options for proto=fd [ 68.377465][ T29] audit: type=1400 audit(1749510592.998:952): avc: denied { listen } for pid=4361 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 68.410859][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.190922][ T4399] wg2: entered promiscuous mode [ 69.195930][ T4399] wg2: entered allmulticast mode [ 69.523809][ T4405] loop1: detected capacity change from 0 to 512 [ 69.582664][ T4405] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.349: casefold flag without casefold feature [ 69.678064][ T4408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.751902][ T4405] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.349: couldn't read orphan inode 15 (err -117) [ 69.870016][ T4405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.967169][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.009161][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.057295][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.010289][ T4423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.046748][ T4423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.570213][ T4446] 9pnet_fd: Insufficient options for proto=fd [ 72.102115][ T4453] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 72.412481][ T4457] pim6reg1: entered promiscuous mode [ 72.417907][ T4457] pim6reg1: entered allmulticast mode [ 72.557788][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 72.575703][ T4469] loop4: detected capacity change from 0 to 128 [ 72.593311][ T4469] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.643253][ T4469] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.376953][ T4486] 9pnet_fd: Insufficient options for proto=fd [ 73.539126][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.691256][ T29] audit: type=1400 audit(1749510599.308:953): avc: denied { create } for pid=4512 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.882691][ T4520] tipc: Started in network mode [ 74.887738][ T4520] tipc: Node identity b2bc48b244af, cluster identity 4711 [ 74.894903][ T4520] tipc: Enabled bearer , priority 0 [ 74.903282][ T4520] syzkaller0: MTU too low for tipc bearer [ 74.909115][ T4520] tipc: Disabling bearer [ 75.024433][ T29] audit: type=1400 audit(1749510599.638:954): avc: denied { write } for pid=4512 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.383850][ T4527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'. [ 75.393039][ T4527] netlink: 112 bytes leftover after parsing attributes in process `syz.4.393'. [ 75.459646][ T4533] loop4: detected capacity change from 0 to 256 [ 75.499901][ T4533] FAT-fs (loop4): IO charset cp866 not found [ 75.517444][ T4533] loop4: detected capacity change from 0 to 256 [ 75.618341][ T4538] loop0: detected capacity change from 0 to 128 [ 75.923256][ T4540] loop3: detected capacity change from 0 to 512 [ 76.058417][ T4540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.085614][ T29] audit: type=1400 audit(1749510600.548:955): avc: denied { getopt } for pid=4537 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.106789][ T4540] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.313295][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.624442][ T4553] Cannot find add_set index 0 as target [ 77.419980][ T4562] loop3: detected capacity change from 0 to 2048 [ 77.455749][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.508084][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.973086][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.983736][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.875741][ T4597] loop3: detected capacity change from 0 to 128 [ 78.967719][ T4597] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.995627][ T4597] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.095620][ T4604] loop4: detected capacity change from 0 to 512 [ 79.102998][ T4604] EXT4-fs: test_dummy_encryption option not supported [ 79.560496][ T4610] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 81.546679][ T4621] loop1: detected capacity change from 0 to 1024 [ 81.618455][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.636915][ T4623] pim6reg1: entered promiscuous mode [ 81.636932][ T4623] pim6reg1: entered allmulticast mode [ 81.801170][ T29] audit: type=1400 audit(1749510606.378:956): avc: denied { read write } for pid=4624 comm="syz.2.425" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.826228][ T29] audit: type=1400 audit(1749510606.378:957): avc: denied { open } for pid=4624 comm="syz.2.425" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.880898][ T4631] loop2: detected capacity change from 0 to 512 [ 81.908491][ T4631] EXT4-fs: test_dummy_encryption option not supported [ 81.921162][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.933466][ T4621] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.965016][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.988101][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.991847][ T29] audit: type=1400 audit(1749510606.598:958): avc: denied { write } for pid=4633 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.702628][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.824629][ T4662] tipc: Started in network mode [ 82.829607][ T4662] tipc: Node identity c277e7b2c559, cluster identity 4711 [ 82.836992][ T4662] tipc: Enabled bearer , priority 0 [ 82.858071][ T4661] tipc: Resetting bearer [ 82.902242][ T4661] tipc: Disabling bearer [ 82.961484][ T4672] loop4: detected capacity change from 0 to 1024 [ 82.979121][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.032757][ T31] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.062394][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 83.075015][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.075015][ T31] [ 83.084962][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 83.091178][ T31] EXT4-fs (loop4): Free/Dirty block details [ 83.097236][ T31] EXT4-fs (loop4): free_blocks=68451041280 [ 83.103069][ T31] EXT4-fs (loop4): dirty_blocks=64 [ 83.108338][ T31] EXT4-fs (loop4): Block reservation details [ 83.114371][ T31] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 83.125849][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.293718][ T4688] loop3: detected capacity change from 0 to 512 [ 83.404882][ T4697] loop1: detected capacity change from 0 to 512 [ 83.427481][ T4697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.519206][ T4688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.542283][ T4697] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.447: corrupted xattr entries [ 83.554823][ T4697] EXT4-fs (loop1): Remounting filesystem read-only [ 83.561574][ T4697] EXT4-fs (loop1): 1 truncate cleaned up [ 83.567893][ T4697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.712966][ T4688] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.315756][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.328626][ T2999] ================================================================== [ 84.336772][ T2999] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 84.345199][ T2999] [ 84.347639][ T2999] write to 0xffff88811a93bb08 of 8 bytes by task 3509 on cpu 1: [ 84.355299][ T2999] inode_set_ctime_current+0x533/0x770 [ 84.360808][ T2999] shmem_unlink+0x115/0x170 [ 84.365349][ T2999] vfs_unlink+0x26c/0x420 [ 84.369711][ T2999] do_unlinkat+0x28e/0x4c0 [ 84.374152][ T2999] __x64_sys_unlink+0x2e/0x40 [ 84.378835][ T2999] x64_sys_call+0x22a6/0x2fb0 [ 84.383538][ T2999] do_syscall_64+0xd2/0x200 [ 84.388051][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.393956][ T2999] [ 84.396283][ T2999] read to 0xffff88811a93bb08 of 8 bytes by task 2999 on cpu 0: [ 84.403830][ T2999] atime_needs_update+0x2ef/0x3e0 [ 84.408885][ T2999] touch_atime+0x4a/0x340 [ 84.413254][ T2999] do_readlinkat+0x134/0x320 [ 84.417871][ T2999] __x64_sys_readlink+0x47/0x60 [ 84.422744][ T2999] x64_sys_call+0x2cf3/0x2fb0 [ 84.427449][ T2999] do_syscall_64+0xd2/0x200 [ 84.431990][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.437902][ T2999] [ 84.440282][ T2999] value changed: 0x00000000684769cf -> 0x00000000684769d0 [ 84.447426][ T2999] [ 84.449774][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 84.455959][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 84.466238][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.476327][ T2999] ================================================================== [ 85.038268][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.